All news in category “Vendor and Hyperscaler Watch”

🛡️ Amazon GuardDuty introduces AI Protection to extend threat detection to AWS AI services such as Amazon Bedrock and Amazon SageMaker. The feature continuously monitors AI workloads for threats like anomalous invocations, cost harvesting attacks, and prompt injection, using CloudTrail management and data events to surface suspicious activity. Findings integrate with AWS Security Hub for centralized triage and can be enabled per account or centrally via AWS Organizations, with a 30-day trial available for GuardDuty customers.

📣 Connect Customer Outbound Campaigns (SMS, WhatsApp, email) are now supported in the Africa (Cape Town) Region. Businesses can create targeted, personalized outreach for service updates, promotions, reminders, and product tips using the Connect Customer admin console and Outbound Campaigns APIs. Built-in analytics measure engagement and event-based triggers automate campaign start based on customer actions.

🛠️ Amazon Managed Service for Apache Flink now includes AI Agent Skills that provide expert, up-to-date guidance for building and operating Flink applications. The skills cover common tasks like creating applications, troubleshooting, scaling, monitoring, networking configuration, and cost optimization. Customers can use these skills with existing AI coding agents such as Kiro, Claude Code, or Cursor by configuring the Agent Toolkit for AWS via the AWS CLI. The feature aims to speed development, simplify upgrades to versions like Flink 2.2, and help maintain healthy, performant streaming applications.

🚀 Amazon Aurora DSQL is now available for single-Region clusters in the Europe (Spain) Region. Aurora DSQL is a serverless, distributed SQL database offering active-active high availability and multi-Region strong consistency, designed for virtually unlimited scalability and zero infrastructure management. The service is now available in multiple AWS Regions and can be tried via the AWS Free Tier.

🛡️ AWS Security Hub now offers an AI inventory that gives central security teams a continuously updated, organization-wide view of AI assets and their security posture. It automatically discovers AI workloads via managed-service integration, SBOM analysis for self-hosted workloads, and GuardDuty DNS telemetry for external API endpoints. Discovered assets are mapped to underlying infrastructure and correlated with security findings to help prioritize remediation. The feature is included with Security Hub Essentials at no additional cost and is available in all commercial AWS Regions where Security Hub is offered.

🔄 Amazon WorkSpaces Personal now offers automated rollback and support for migrating stopped WorkSpaces from PCoIP to the Amazon DCV streaming protocol. The update extends the console-based migration workflow and checkpoint snapshot support, enabling administrators to run large-scale migrations without manually starting stopped instances. These features are available in all AWS commercial and AWS GovCloud (US) Regions where WorkSpaces Personal is supported.

🤖 Claude on Google Cloud pairs Anthropic's frontier models with Google Cloud's managed infrastructure, enabling enterprises to run large-scale AI in production. It provides unified IAM, VPC controls, observability, and global, regional, and multi-region endpoints to meet latency and data-residency needs. Built-in model features like prompt caching, streaming, and extended context combine with Google Cloud serving capabilities such as batch prediction and provisioned throughput for cost and performance optimization.

🔒 This post introduces Web Bot Authentication (WBA) in AWS WAF Bot Control, a cryptographic, standards-based method for verifying automated agent identities using HTTP Message Signatures. It explains how asymmetric signatures and IETF drafts enable tamper-proof verification, the new WAF labels (verified, invalid, expired, unknown_bot, vendor, name, account), and how verified traffic is handled by default. The article also outlines deployment steps, supported rule group versions, monitoring guidance, and future registration APIs.

🔐 Microsoft will make passkeys the default authentication method for Entra ID starting September 2026, automatically enabling them for users currently relying on SMS and voice MFA. Those phone-based methods will be retired as native Entra capabilities on February 1, 2027, though organizations can use third-party telecom providers if needed. Users already on phishing-resistant methods like Windows Hello for Business, FIDO2 keys, or smart cards can continue using them without change.

🛡️Pentera enables AI assistants to use validated attack evidence rather than fragmented risk signals, helping teams prioritize and remediate real exploit paths. The platform emulates attacker techniques across environments, generating concrete attack paths with proof of techniques, credentials, privileges, and assets at risk. An MCP Server exposes Pentera validation data to AI workflows locally, preserving enterprise controls and auditability. This approach shifts workflows from inference to evidence-driven action, improving prioritization, ticketing, and revalidation.

🔍 Microsoft is testing a faster, cleaner Windows Search experience for Insiders that emphasizes relevant local results over ads and promotional content. The update, announced by Windows search leads, is rolling out via the Experimental channel and Controlled Feature Rollout, with feature flags and a reboot check for access. Changes include clearer result sources, a setting to hide Store and web suggestions, improved two-character file search, better cloud-file visibility, and increased typo tolerance. Reliability fixes and additional improvements are coming soon.

🎯 Cisco Talos Intelligence Integrations apply continuous, up-to-date threat intelligence across Cisco security and enterprise products to help identify and block malicious activity. The integrations aim to reduce uncertainty for defenders facing advanced, adaptive threats such as AI-assisted attacks and polymorphic malware. A short video introduces Talos team members and demonstrates how reputation and detection feeds inform security decisions. A more detailed technical overview is available on the Cisco Security site.

🗂️ AWS Storage Gateway now supports copying file shares across gateways directly from the console. The feature reads the source share configuration and creates a new, compatible file share on the destination gateway, preserving settings where possible. A guided workflow highlights any configurations that need attention before creation, simplifying migrations such as upgrades to AL2023. This capability is available in commercial AWS Regions and can be started from the Storage Gateway console's file shares view.

📝 You can now write custom data directly into CloudFront access logs using a new helper method available from within CloudFront Functions. These lightweight JavaScript functions run at the edge for tasks like URL rewrites, header manipulation, and request routing. Use cf.logCustomData() from viewer request or response functions to embed values such as A/B test variants, authentication outcomes, or routing decisions into the access log record. The feature works with both real-time and standard (v2) logging, and there is no additional charge for using cf.logCustomData().

🚀 Amazon Bedrock now offers OpenAI's GPT-5.6 family—Sol, Terra, and Luna—via the Responses API on the bedrock-mantle endpoint. Sol targets flagship reasoning and advanced agentic coding, Terra balances performance and cost, and Luna prioritizes fast, affordable inference. Models support prompt caching with explicit breakpoints and regional availability in US East and US West regions.

🛠️ Amazon Managed Service for Prometheus is now available in the Asia Pacific (New Zealand) Region. The service is fully managed and Prometheus-compatible, enabling scalable monitoring and alerting on operational metrics. Customers can send up to 1 billion active metric series to a single workspace and create multiple workspaces per account. Availability in New Zealand expands regional coverage for customers using Amazon Managed Service for Prometheus.

🛠️ The new Amazon DocumentDB skill in the Agent Toolkit enables AI coding agents to provision, manage, migrate, optimize, and troubleshoot DocumentDB clusters using guided, best-practice workflows. The skill supports seven workflows including provisioning, schema design, MongoDB compatibility assessment, DMS migration with change data capture, performance tuning, a 41-check well-architected review, and major version upgrades. When used with the AWS MCP Server, agents can execute AWS CLI commands and diagnostic queries with IAM guardrails, CloudTrail logging, and sandboxed execution. The skill is also available standalone via the AWS CLI and is provided at no additional charge as part of the Agent Toolkit for AWS.

🔒 Microsoft Entra ID will begin rolling out passkeys as the default phishing-resistant authentication method starting September 1, 2026. Users currently using SMS or voice for MFA will be auto-enabled for passkeys and prompted to register on their next sign-in. Microsoft will retire native SMS and voice delivery on February 1, 2027, after which telecom partners via the Microsoft Security Store will be required for those methods.

🆕 Amazon DocumentDB (with MongoDB compatibility) now supports 46 additional MongoDB aggregation operators and cursor methods in minor version 8.0.1. This expansion covers accumulators, trigonometry, bitwise aggregation, arithmetic, data size and type checks, timestamp functions, and new stages and cursor methods. The new operators are available in all regions where Amazon DocumentDB is offered and aim to simplify MongoDB workload migration without application code changes.

🛡️ The 2026 Public Sector Threat Landscape report summarizes Mandiant’s 2025 incident investigations and highlights how adversaries now move at machine speed, notably the 22-second hand-off from initial access to ransomware. It argues public agencies must adopt continuous verification and machine-speed defenses. Google outlines three core capabilities—identity as the perimeter, agentic defense, and hardened infrastructure—and describes new AI agents in Google Security Operations and customer success stories.