All news in category “Vendor and Hyperscaler Watch”

📱 Google Cloud announced the public preview of Developer Device Platform (DDP), a fully managed service offering on-demand access to real physical devices and high-concurrency virtual emulators. DDP provides interactive debugging via Device Streaming and parallel CI/CD testing via Device Run, enabling faster iteration, smarter sharding, and auto-retries. The platform supports integration with coding agents and will integrate with Android Studio and CLI, charging users on a pay-per-minute public preview model.

🖥️ Amazon GameLift Streams now captures and distributes shader caches for applications without requiring code changes. You mark a stream session to capture a cache, and the service replicates it across compatible stream groups and locations to reduce load times and visual stuttering. Monitor cache status and size via the ListApplicationShaderCaches API or the GameLift Streams console. The feature supports Linux (Ubuntu 22.04), Proton, and Windows Server 2022 runtimes, and storage of the latest cache version is billable.

📣 AWS Marketplace now supports category-based managed buyer notifications via AWS User Notifications, replacing the previous single-root-email delivery. Buyers can select from four notification categories — Products and Solutions, Agreements and Subscriptions, Private Offers, and Pricing Changes — and route them to multiple recipients and channels such as additional emails, distribution lists, mobile console alerts, Slack, and Microsoft Teams. By default all categories remain enabled to the root email; full rollout with automatic enablement for all customers begins January 2027.

🔒 AWS has renewed the Police-Assured Secure Facilities (PASF) accreditation for the Europe (London) Region for Official-Sensitive data. This renewal, confirmed by the Police Digital Service on May 28, 2026, continues a PASF accreditation that AWS London first obtained in 2017. The PASF program involves a control set of security requirements, on-site inspections, and audit interviews to validate facilities that handle UK law enforcement data. UK police and law enforcement organizations can verify compliance through the Police Digital Service and AWS Artifact.

🔐 AWS Identity and Access Management (IAM) introduced Account Access Manager, simplifying assignment of IAM roles to workforce users and groups from AWS IAM Identity Center. Administrators can now manage role assignments centrally while retaining per-account role flexibility, using the AWS IAM console, SDKs, CloudFormation, and CDK. The feature consolidates permissions management, user awareness, and a single federation point at no additional cost.

🤖 Over Agents Week, Cloudflare outlined how agents are shaping a new class of software and detailed the platform work required to support AI-native applications. The company presented daily briefings covering runtime and infrastructure, the Agent Development Lifecycle (ADLC), Zero Trust for agents, the concept of an Agentic Internet, and measurement tools for agent behavior on the web. Cloudflare emphasized secure execution layers, developer primitives, and community collaboration as core to this evolution.

🛠️ Amazon EC2 now offers application status checks that detect application-level failures such as web servers not accepting requests, stopped Docker daemons, or broken networking. Customers specify protocol, port, path, and healthy response codes to create checks, then associate them with instances by ID or tag. EC2 sends HTTP/HTTPS probes every 60 seconds and reports application health alongside existing instance and system checks, enabling Auto Scaling groups to replace instances flagged as unhealthy. This feature is available in all commercial AWS Regions and AWS GovCloud (US).

🔒 Amazon Web Services (AWS) completed the 2026 CyberVadis assessment and achieved the highest score (Mature) across all evaluated areas, demonstrating commitment to elevated cloud-security expectations. The report and scorecard are now available to help customers reduce third-party due-diligence burdens and map AWS controls to common industry frameworks. Customers can download the full assessment via the CyberVadis portal or AWS Artifact and contact their AWS account team with questions.

🚀 Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports in-place migration from Apache ZooKeeper to KRaft, letting customers convert existing clusters without provisioning new infrastructure or reconfiguring clients. KRaft moves metadata management into Kafka controllers, improving metadata propagation, scalability, and simplifying architecture. The migration requires Kafka 3.9.x as an intermediate step and enables upgrades to Kafka 4.x, and is available today in all MSK provisioned regions except the European Sovereign Cloud (Germany).

🔍 Malachyte applies attention-based neural networks and LLM-inspired sequence modeling to address the retail "cold start" problem, updating user vectors in real time to personalize search and product pages. By streaming every interaction through Managed Service for Apache Kafka into Bigtable and combining multimodal embeddings, the platform refines predictions and privacy-friendly personalization within 100 milliseconds. Built on Google Cloud's AI stack, the solution leverages GKE, GCE, and Cloud Pub/Sub to enable continuous learning across retailers.

🔒 Microsoft announced it was named a Leader in the 2026 IDC MarketScape: Worldwide MDR/MXDR for the Enterprise. Microsoft Defender Experts MDR is a 24/7 managed detection and response service that operates natively on Microsoft Defender, combining global threat intelligence, AI-assisted workflows, and human experts. The service emphasizes continuous detection improvements, proactive hunting, and clear incident reporting to extend customer SOC capabilities.

🔒 ClusterNetworkPolicy (CNP) is a new cluster-scoped network policy API added to GKE to let administrators enforce deterministic, non-bypassable network guardrails across namespaces. CNP introduces a hierarchical tier model—admin, network policy, and baseline—with top-to-bottom evaluation and an explicit Pass action to delegate final decisions. Built with the Kubernetes SIG-Policy WG and implemented with Cilium, CNP is open source and intended to improve scalability, compliance, and portability of network security controls in multi-tenant clusters.

🔔 The next generation of Amazon OpenSearch Serverless now supports up to 10,000 collections within a single collection group, increased from the previous limit of 1,500. Collection groups let multiple collections share OpenSearch Compute Units (OCUs) even when encrypted with different AWS KMS keys. This change enables greater consolidation, improved compute utilization, and reduced per-collection costs for multi-tenant workloads. The higher limit applies automatically to new and existing nextgen collection groups in all available AWS Regions.

🚀 Palo Alto Networks announced it was named a Leader in Gartner’s 2026 Magic Quadrants for both SASE and SSE, the fourth consecutive year it has achieved this distinction. The company highlights its Prisma Access and Prisma SASE platforms as leading in execution and vision, and emphasizes AI-driven defenses and agent-aware security to address emerging risks from GenAI and Frontier AI. Palo Alto cites growth metrics and customer adoption to validate its strategic direction.

🔒 Anthropic’s new inference hooks let enterprises enforce security policies before prompts reach Claude, enabling real-time allow-or-deny decisions without proxies or endpoint agents. Check Point Workforce AI Security integrates in minutes to apply existing DLP and attack protection rules across Claude web, desktop, and tool calls, with shadow mode, gradual rollout, and centralized event logging. The protocol does not rewrite prompts and currently inspects prompts and tool calls only.

🔧 AWS Elastic Disaster Recovery now preserves UEFI boot mode when recovering Linux source servers that boot with UEFI firmware. Previously, recovered Linux instances launched in legacy BIOS mode and could require extra post-recovery configuration. Recovered instances now launch with the same UEFI boot mode as the source, ensuring applications that depend on UEFI behavior function without additional steps. This automatic capability is available in all Regions where AWS DRS is offered at no extra cost.

🔒 Cloudflare for Government has achieved FedRAMP Class D (High) certification, marking a major milestone in meeting rigorous U.S. federal security standards. Built on Cloudflare’s single global network and its Data Localization Suite, the FedRAMP High offering ensures processing and storage of inspected traffic within U.S. data centers. This foundation also supports Cloudflare’s pursuit of DoD IL4 authorization to serve defense-sector needs.

🔐 The Python ecosystem now offers post‑quantum cryptography via a new pip-installable library. Funded by the Sovereign Tech Agency, contributions to pyca/cryptography add support for ML-KEM and ML-DSA, the NIST-standard key-establishment and digital-signature primitives. The announcement emphasizes there is no immediate emergency, but adopting crypto agility is prudent.

🔐 Unit 42 finds identity compromises underpin most modern incidents, with the 2026 Global Incident Response Report showing identity weaknesses in nearly 90% of investigations and 65% of initial access events. Attackers increasingly use phishing, social engineering, MFA manipulation and third-party account misuse to gain entry, then move laterally, escalate privileges and blend into administrative behavior. Unit 42 recommends correlating identity, endpoint, cloud and network telemetry, applying AI-driven correlation and centralized investigations, and investing in continuous threat hunting and SOC engineering to detect and contain identity-driven intrusions earlier.

🆕 Amazon EC2 R8i and R8i-flex instances are now available in Europe (Milan), powered by custom Intel Xeon 6 processors exclusive to AWS. These instances provide up to 15% better price-performance and 2.5x memory bandwidth versus prior Intel-based instances, plus up to 20% higher performance than R7i. R8i-flex offers common memory-optimized sizes for cost-efficient workloads, while R8i includes 13 sizes, two bare metal options, and a 96xlarge for the largest applications, with SAP certification and 142,100 aSAPS.