All news in category “Vendor and Hyperscaler Watch”

🔒 Palo Alto Networks has unveiled Idira, an identity security platform designed to protect human users, machine identities, and autonomous AI agents by applying dynamic privilege controls across all identity types. The platform leverages Palo Alto’s integration of CyberArk and continuously discovers and enriches identities across SaaS, cloud, and developer environments. Idira elevates privileges only when required and revokes them immediately, aiming to close blind spots left by legacy IAM and PAM systems. Analysts say it targets gaps in offerings such as Auth0 and SailPoint but does not eliminate the need for layered security.

⚠️ Microsoft confirmed that a recent service update introduced a configuration change preventing some customers from downloading and installing Office on Windows 365 Cloud PCs. The issue, tracked as WP1309017 and first acknowledged on May 12, is being investigated and a fix is in development. Microsoft said validation and deployment of the fix will take time and expects a further update on Friday. Affected users can manually download Office from the Microsoft 365 page while remediation proceeds.

🔔 Amazon RDS for Oracle now supports M8i and R8i instances with Oracle Database Standard Edition 2 (SE2) License Included. These instances use AWS-exclusive custom Intel Xeon 6 processors and deliver up to 15% better price-performance and 2.5× more memory bandwidth versus prior Intel-based generations. SE2 LI provides subscription, pay-per-use pricing that bundles Oracle license, support, compute, and the managed DB service. Customers can create LI instances via the AWS Management Console or AWS CLI and select the LI option.

🔐 Intrusion Logging is an opt-in feature in Android's Advanced Protection Mode that records daily device and network activity to support forensic investigations. Developed with Amnesty International and Reporters Without Borders, it captures app launches, installs, network connections, USB file transfers, certificate changes, and lock/unlock events. Logs are end-to-end encrypted on the device, stored on Google servers for 12 months, and cannot be deleted early; users may download decrypted logs for external review but remain responsible for their security.

🔒 Google describes five coordinated approaches to reduce scams and fraud, presented at the EMEA Anti-Scams and Fraud Summit hosted by the Google Safety Engineering Center in Zurich. The company highlights AI-powered defenses that block spam, malware and policy-violating ads, plus on-device scam detection in Phone by Google. It also emphasizes user tools, education through Be Scam Ready, cross-platform threat-data sharing via the Global Signal Exchange, and partnerships with law enforcement to disrupt criminal networks.

🔒 Microsoft announced MDASH, a multi-model agentic scanning harness that orchestrates over 100 specialized AI agents to discover, validate, and prove exploitable bugs in Windows. In internal tests it found 21 of 21 seeded driver vulnerabilities with zero false positives and achieved an industry-leading 88.45% score on the CyberGym benchmark. The harness produced 16 CVEs in today’s Patch Tuesday across networking and authentication stacks, including four Critical remote code execution flaws, and is in limited private preview with select customers.

🔍 AWS Security Agent now offers a preview of full repository code review, an AI-driven capability that performs deep, context-aware analysis across entire repositories. It models application architecture, trust boundaries, and data flows rather than relying on pattern matching, and returns developer-ready findings with structured evidence and concrete remediation. The feature is designed to complement existing SAST tools and is available in preview at no additional charge while AWS solicits customer feedback.

🔒 Signal has rolled out new in-app confirmations and warning messages to help users detect phishing and social engineering attempts that abuse the Linked Device feature. The updates add visible cues such as “Name not verified” and “No groups in common”, stronger safety tips, and prompts reminding users the app will never ask for registration codes, PINs, or recovery keys. These measures aim to introduce friction so recipients can better evaluate external requests.

🔔At SAP SAPPHIRE, Google Cloud and SAP introduced a Unified Data Foundation to connect SAP business data directly into BigQuery and enable agentic AI workflows. Announcements include BDC Connect for BigQuery GA with zero-copy access, new 48TB X5 memory-optimized instances, a SecNumCloud-qualified Sovereign Cloud with S3NS, and Google SecOps for SAP in preview. The new Cortex Framework preview aims to accelerate building agentic solutions while maintaining enterprise governance and reducing data movement.

🚀 Scheduled scaling is now available for AWS Lambda Managed Instances, using Amazon EventBridge Scheduler to set one-time or recurring adjustments to function capacity limits. This lets you proactively raise capacity before expected peaks and lower it (including to zero) during idle periods to balance performance and cost. Schedules can be created via the EventBridge Scheduler console, AWS CLI, AWS SDKs, AWS CDK, or AWS CloudFormation and are available in all Regions that support Lambda Managed Instances.

🚀 At SAP Sapphire 2026, Microsoft and SAP announced expanded integrations to embed AI across SAP applications on Azure, emphasizing Microsoft IQ as a shared intelligence layer and agent-to-agent capabilities between Copilot and Joule. The updates include bi-directional, zero-copy delta sharing with SAP Business Data Cloud and Microsoft Fabric, sovereign cloud expansions, and an enlarged RISE with SAP acceleration program. These developments aim to move enterprises from experimentation to production-ready, governed AI at scale.

🚀 Amazon EventBridge Scheduler expands its AWS SDK integrations with 619 new API actions across 13 additional services, including support for AWS Lambda Managed Instances. This update enables customers to schedule direct API invocations for a broader set of AWS services without writing custom integration code. As a serverless scheduler, EventBridge Scheduler can manage billions of scheduled events and now supports time-based scaling of Lambda managed instances for more precise capacity control. The enhancements are generally available in all Regions where Scheduler is offered, subject to target service availability.

🔒 AWS today introduced full repository code review in AWS Security Agent, a capability that performs deep, context-aware security analysis across entire codebases. Unlike traditional static scanners, it reasons about architecture, trust boundaries, and data flows to surface systemic vulnerabilities. When issues are identified, the scanner generates file- and line-specific remediation guidance and exploit proofs-of-concept to accelerate fixes; preview access is available at no extra charge in all Regions.

🔒 Amazon SageMaker Feature Store now supports the SageMaker Python SDK v3, providing modular APIs to manage feature groups with less boilerplate. Data scientists can enable Lake Formation access controls to enforce column- and row-level permissions on offline store data at feature group creation. The SDK also exposes Apache Iceberg table properties for configuring compaction and snapshot expiration to optimize storage and queries. Available in all AWS Regions where Feature Store is offered; install v3.8.0 or later to begin.

🔁 Amazon EKS now supports Amazon Application Recovery Controller (ARC) zonal shift and zonal autoshift when using the open-source Karpenter for compute provisioning. ARC automates redirecting in-cluster network traffic away from an impaired AZ and can perform practice runs to validate cluster behavior. During a zonal shift, Karpenter stops provisioning in the impacted AZ, halts voluntary disruptions there, and avoids scheduling actions that depend on that zone. Enable support by setting ENABLE_ZONAL_SHIFT.

🔒Android 17, rolling out next month, expands security and privacy features to combat device theft, enhance threat detection, and block banking scam calls. The OS will work with banking apps to verify caller authenticity via app-level queries and bank-provided number lists, and will automatically terminate suspected scam calls. Initial partners include Revolut, Itaú Unibanco, and Nubank, and Google plans support back to Android 11. The release also broadens Live Threat Detection, strengthens Advanced Protection, and adds biometric Mark as lost locking and other anti-theft measures.

🔐 Modern DDoS attacks have evolved from simple volumetric floods to multi-vector, application-layer abuse amplified by AI-enabled tooling and expansive botnets. Microsoft reports a sharp rise in attack volume since mid‑March 2024 and urges a system-level, defense-in-depth approach that combines fingerprinting (JA4), layered controls, and operational visibility. Cloud-native protections such as Azure DDoS Protection and Azure WAF help when integrated with resilient application design and pretested graceful-degradation plans.

🔧 Amazon Connect Customer now lets developers embed Cases and Customer Profiles into custom agent interfaces through the Amazon Connect SDK. This integration surfaces case details, status, history, and consolidated customer context directly in agents' existing tools, reducing context switching and duplicate development. The SDK is available in all Regions where the service is offered; consult the administrator and developer guides to begin.

🚀Amazon CloudFront's Premium flat-rate plan now offers multiple self-service monthly usage tiers ranging from 500 million to 6 billion requests and 50 TB to 600 TB. Customers can select and change their tier in the CloudFront console with instant pricing and no commitment. All Premium features — including AWS WAF, DDoS protection, bot management, Amazon Route 53 DNS, Amazon CloudWatch Logs ingestion, serverless edge compute, and Amazon S3 storage credits — are included with no overage charges.

🚀 Amazon Redshift RG instances are now generally available, delivering up to 2.4x faster analytics than RA3 and 30% lower price per vCPU. The RG generation embeds a vectorized data lake query engine that processes Apache Iceberg and Parquet on-cluster, eliminating the need for Redshift Spectrum's separate scan fleet and per-terabyte charges. Built-in capabilities include JIT Analyze, intelligent NVMe caching, smart prefetch, vectorized Parquet scans, and advanced file and partition pruning. RG launches in two sizes (rg.xlarge, rg.4xlarge) and supports Snapshot & Restore, Elastic Resize, and Classic Resize for migrations.