All news in category “Vendor and Hyperscaler Watch”

🔒 AWS Security Hub is now available in the AWS GovCloud (US-East) and AWS GovCloud (US-West) Regions. Security Hub offers a unified cloud security posture by correlating and enriching signals from Amazon GuardDuty, Amazon Inspector, and Security Hub CSPM to prioritize active risks. The service delivers near‑real‑time risk analytics, exposure findings, automated response workflows, attack path visualization, and centralized organization-wide deployment with streamlined pricing for improved cost predictability.

📡 Amazon Kinesis Video Streams (KVS) now supports WebRTC in AWS GovCloud (US) Regions, enabling real-time, two-way media streaming with sub-second latency for security-sensitive workloads. This extends KVS's secure ingest, storage, and processing capabilities to mission-critical use cases such as live surveillance, body-worn camera streaming, drone feeds, and IoT monitoring while preserving data residency and compliance. The feature is available in AWS GovCloud (US-East) and (US-West).

🧬 AWS HealthOmics now supports VPC-connected workflows, allowing bioinformatics pipelines to access AWS resources across regions and public internet resources through a customer VPC. New Configuration APIs let teams specify VPCs and manage public internet dependencies at a per-run level without changing workflow code. This capability is HIPAA-eligible and available in all HealthOmics regions.

🔒 Microsoft frames digital sovereignty as a practical, consultative discipline that extends beyond privacy to encompass continuity, resilience, and responsible AI adoption. The post outlines a Sovereign Cloud continuum—including the EU Data Boundary, hybrid and private cloud options, and expanded disconnected operations—to provide organizations with choice, visibility, and control. It emphasizes transparency, risk-based engagement, and long-term accountability as core means to build durable trust while enabling innovation.

📣 AWS Elemental MediaTailor is now available in the Europe (London) AWS Region. MediaTailor provides personalized ad insertion and channel assembly via server-side ad insertion (SSAI) and Server Guided Ad Insertion (SGAI) for live and on-demand streams, delivering broadcast-quality playback without buffering or client-side ad blockers. This expansion places ad decisioning and stitching closer to Northern European viewers, reducing latency, improving ad fill rates, and offering additional redundancy and capacity alongside the Europe (Ireland) region.

🚀 Amazon Athena now supports Capacity Reservations in an expanded set of commercial AWS Regions, providing dedicated serverless capacity for mission-critical queries. With reservations, queries run isolated from other workloads in your account and administrators can control how many queries run concurrently to improve predictability. The expansion spans multiple US, Africa, Asia Pacific, Canada, Europe, and Mexico regions, enabling more consistent performance closer to where data resides.

🚀 Microsoft was named a Leader in the 2026 Gartner Magic Quadrant for Integration Platform as a Service, its eighth consecutive year of recognition. The company positions Azure Integration Services as a unified platform to connect applications, data, APIs, and events while operationalizing AI across the enterprise. With Azure Logic Apps and Azure API Management, Microsoft highlights support for agentic workflows, embedded governance, and AI Gateway capabilities to enforce policies, manage usage, and ensure compliance as organizations scale AI-driven operations.

🔒 ID.me moved its identity platform to Google Cloud to handle massive scale and improve AI-driven fraud detection. The team migrated over 50 TB across 15 database instances and adopted a two-tier architecture using AlloyDB for heavy workloads and Cloud SQL for standard services. This reduced provisioning and maintenance overhead, sped development from weeks to days, and lowered data-team work time by 40% while enabling real-time fraud analysis.

🔍 Amazon OpenSearch Service now exposes Cluster Insights directly in the AWS Management Console, complementing the existing OpenSearch UI Dashboards. This update makes it easier to review curated performance and resilience recommendations and apply configuration changes without switching tools. Cluster Insights also now emits findings as events to Amazon EventBridge to support automated monitoring and response. The feature is available at no additional cost for OpenSearch versions 2.17 or later.

⚠️ Apple has introduced a new security measure in macOS Tahoe 26.4 that delays execution when users paste commands into Terminal and displays a warning highlighting potential risks. The mechanism appears aimed at mitigating ClickFix social‑engineering attacks that trick users into pasting malicious commands. Users may cancel the paste or choose to proceed if they understand the command, and Apple has not yet published official documentation for the behavior.

🔍 Many SOCs blame threats for slow Tier 1 response, but this contributed piece argues process friction is often the true bottleneck. It recommends three operational fixes: a unified cross-platform investigation workflow, behavior-first triage with automated interactivity, and standardized escalation built on response-ready evidence. Implementing a sandbox-backed, automated workflow reduces tool switching, cuts repetitive manual steps, and shortens validation time to lower unnecessary escalations.

🔒 Apple has implemented a camera-indicator approach that carefully blends hardware and system design to ensure users are alerted when the camera is active. While a dedicated LED appears inherently more tamper-resistant than an on-screen widget, Apple addresses overlay and spoofing concerns through integrated hardware–software controls and system-level protections. The result is a thoughtfully engineered notification mechanism that substantially reduces the risk of unnoticed camera use.

🔍Data Agent in the Amazon SageMaker Unified Studio Query Editor brings natural-language-to-SQL capabilities to your SQL analytics workflow. You can ask questions in plain language and have the agent generate context-aware SQL for Amazon Redshift and Amazon Athena, propose step-by-step plans, and use Fix with AI to diagnose and correct failed queries. It preserves query context across follow-ups and is available in IAM domains where SageMaker Unified Studio is supported.

📡 AWS Direct Connect now publishes three Amazon CloudWatch metrics for virtual interfaces, giving network teams native visibility into BGP session health and route counts. The new VirtualInterfaceBgpStatus, VirtualInterfaceBgpPrefixesAccepted and VirtualInterfaceBgpPrefixesAdvertised report session state, on-prem prefix intake, and routes advertised by AWS, enabling proactive alarms and validation of configuration changes. These metrics apply to private, public and transit VIFs in all commercial AWS Regions and integrate with CloudWatch alarms, dashboards and Amazon SNS to reduce detection time and simplify hybrid network operations.

🔒 Cloudflare is making advanced client-side protections self-serve and offering domain-based threat intelligence free across all Client-Side Security customers. The Client-Side Security Advanced bundle brings machine learning and an LLM-backed second opinion to detect malicious JavaScript and drastically reduce false positives. It relies on browser reporting like CSP and requires only that traffic be proxied through Cloudflare, so there is zero latency impact to applications. These tools are intended to help organizations of all sizes detect skimming, supply-chain compromises, and sophisticated browser-side attacks.

✨ The Check Point Portal has received its largest visual refresh to date, delivering a brighter, cleaner and more modern UI designed to improve task completion and reduce clutter. The redesign introduces a new design system that rethinks spacing, typography, and component hierarchy to surface what matters faster. Administrators will find familiar functionality preserved while navigation and workflows are streamlined. The update emphasizes clarity, performance, and a consistent visual language.

🔍 Amazon Timestream for InfluxDB now provides Advanced Metrics that automatically publishes detailed operational metrics from InfluxDB 2 instances to Amazon CloudWatch. The capability supports both Single‑AZ and Multi‑AZ deployments and requires no additional configuration or instrumentation. Teams can use the metrics to monitor resource utilization, query performance, and system health in real time, build custom dashboards, and configure automated alerts based on predefined thresholds. Advanced Metrics is available in all Regions where the service is offered.

🔐 This collection from Google Cloud offers a behind-the-scenes look at how Google approaches modern cybersecurity challenges, from fundamentals to AI. Across practical essays and expert perspectives, it covers modernizing threat detection, building AI agents for defense, red teaming at scale, vulnerability management and supply chain controls like Binary Authorization. The pieces emphasize operational rigor, the application of SRE to security, and a commitment to Secure by Design principles to help defenders adopt scalable, enterprise-ready practices.

🔒 Amazon Connect now applies tag-based access control (TBAC) to quick response assignments for routing profiles. Administrators can restrict which routing profiles receive specific quick responses based on their TBAC permissions, so agents only see templates relevant to their assigned profiles. This change aligns quick responses with existing Amazon Connect resource access controls and supports compliance and localized disclosure workflows. The update is available in multiple AWS Regions.

🔒 Amazon CloudWatch Logs Infrequent Access (Logs IA) now supports expanded analytics and data protection capabilities, including OpenSearch PPL and OpenSearch SQL query support. These additions let customers run advanced, flexible queries on infrequently accessed logs while keeping data consolidated natively on AWS. Built-in data protection can automatically detect and mask sensitive information in logs, helping organizations meet security and compliance requirements without manual redaction. Logs IA remains a lower-cost ingestion class with existing features like Logs Insights Query Language, S3 export, and encryption, making it suitable for ad-hoc troubleshooting and forensic analysis.