All news in category “Vendor and Hyperscaler Watch”

🔒 AI is accelerating cyberattacks, increasing speed and scale across the attack chain while identity remains a primary entry point. Microsoft highlights integrated visibility and response through Microsoft Entra and Microsoft Defender, including a unified identity risk score and an updated Entra ID Protection experience. New features aim to reduce fragmentation, enable least-privilege response roles, and automate policy optimization to help teams prevent, detect, and respond faster.

📡 AWS HealthOmics now streams workflow engine logs to Amazon CloudWatch in real time, enabling customers to monitor workflow execution progress as it happens. This HIPAA-eligible service helps healthcare and life sciences teams accelerate bioinformatics workflows with immediate access to orchestration events, task scheduling details, import/export activity, and full stack traces on errors. Streamed logs support CloudWatch alarms, dashboards, and integration with observability tooling for faster debugging and iterative development.

🛡️ AWS announces Continuum for code vulnerabilities in gated preview, designed to manage the full lifecycle of code vulnerabilities at machine speed. The service reasons over structured AWS data and unstructured organizational context, is model‑agnostic, and operates in continuous phases from discovery to remediation. It begins in a human‑in‑the‑loop learn mode and can be graduated to enforce mode for automated remediation, and incorporates pen testing, code scanning, and threat modeling capabilities.

🔔 Amazon Aurora MySQL-Compatible Edition and Amazon RDS for MySQL now offer RDS Extended Support for MySQL 5.7 through June 30, 2029, extending the previous end date of February 28, 2027. This extension covers Aurora MySQL version 2 (MySQL 5.7 compatibility) and RDS for MySQL 5.7, providing critical security patches, high-severity CVE fixes, operational bug patches, and AWS Support under existing SLAs. There is no price increase; customers remain on Year 3 pricing through June 30, 2029. AWS recommends upgrading to MySQL 8.0 or 8.4-compatible versions and provides upgrade paths including Blue/Green Deployments, in-place upgrades, or snapshot restore.

🛠️ AWS DevOps Agent now includes a release management capability in preview that reviews code changes for release readiness and runs autonomous release testing to improve production deployments. The feature evaluates drift from internal standards, dependency impacts, and access controls, and maps cross-repository dependencies to surface breaking changes. It also generates and executes test plans for web and API applications in customer environments to catch regressions and integration issues. The preview is available in US East (N. Virginia) at no additional cost.

🚀 Amazon RDS now supports M9g DB instances powered by AWS Graviton5 for PostgreSQL, MySQL, and MariaDB. These Graviton5-based instances deliver up to a 30% performance boost and up to a 23% improvement in price/performance versus Graviton4 equivalents, varying by engine, version, and workload. New 24xlarge and 48xlarge sizes provide up to 192 vCPUs, 100 Gbps enhanced networking, and 72 Gbps EBS bandwidth. Availability begins in US East (N. Virginia, Ohio), US West (Oregon), and Europe (Frankfurt); consult RDS documentation and pricing for engine support and regional details.

🚀 AWS now supports bmn-cx3a instances on second-generation Outposts racks, introducing AMD-based instances with accelerated networking. These instances use 5th Gen AMD EPYC CPUs and NVIDIA ConnectX-7 NICs to deliver up to 800 Gbps of bare-metal network bandwidth. Offered in two sizes with up to 256 cores, 1.5 TB memory, and dual 8 TB NVMe storage, they include L2 multicast and hardware PTP for low-latency, high-throughput workloads. Availability aligns with regions that support second-generation Outposts racks.

🤖 Amazon Quick receives major updates including autonomous agents, multi-dataset analytics, and a redesigned activity feed. Quick connects to common business apps and learns workflows to automate recurring tasks and reduce manual notifications. The multi-dataset analytics lets users query across sources like Snowflake and relational databases using natural language while inheriting semantics from catalogs such as AWS Glue and Databricks Unity Catalog. The updated activity feed provides a conversational, personalized workspace for approvals, messaging, and sharing Quick applications externally.

🛡️ Cloudflare announced the Cloudflare One stack, a pair of agent skills designed to automate planning, deploying, migrating, and managing Zero Trust environments. The toolkit packages Cloudflare’s institutional migration expertise into two skill files — cloudflare-one and cloudflare-one-migration — to assist with VPN replacement, Gateway policies, connectivity, vendor-to-vendor translation, and troubleshooting. When paired with the Cloudflare code mode MCP server, agents gain typed, controlled access to the Cloudflare API for live inventory, configuration inspection, and curated change workflows.

🔍 Today AWS announced a preview of business context and semantic search for AWS Glue Data Catalog, enabling discovery of data by semantic meaning. You can enrich catalog tables with glossary terms, custom metadata fields, and add skills that provide agents with additional context. The new Glue Search API lets you find tables by both structure and attached business meaning, and MCP-compatible agents can use the aws-data-analytics plugin to integrate with minimal setup.

🛡️ Amazon Web Services announced that Amazon Bedrock AgentCore now supports Bedrock Guardrails in policy, enabling enterprises to enforce safety and security controls on AI agents in production. AgentCore policy authorizes which actions agents can take and now evaluates outputs and gateway inputs in real time to detect and block prompt injection, harmful content, and sensitive data exposure. Guardrail enforcement occurs at the AgentCore gateway perimeter, with all evaluations logged via AgentCore observability for auditing and optimization. The capability integrates with existing gateway deployments, supports natural language or policy-as-code authoring, uses consumption-based pricing, and is available in multiple global AWS regions.

🔍 AWS announces new AgentCore optimization capabilities that turn production traces into continuous agent improvements. The features surface failure, intent, and trajectory insights across sessions to reveal silent and recurring failures, then generate data-grounded recommendations for prompts and tool descriptions. Batch evaluation and A/B testing validate fixes against defined metrics before rollout, and capabilities work across AgentCore runtime, Lambda, EKS, and non-AWS environments.

🛠️ Oracle Autonomous AI Database Serverless (ADB-S) is now available on Oracle Database@AWS through AWS Marketplace with Bring Your Own License and License Included options. ADB-S runs on Exadata infrastructure as a fully managed service that automates patching, tuning, scaling, backups, and high availability. It supports four workload types—AI Transaction Processing, AI Lakehouse, AI JSON Database, and Oracle APEX—with independent compute and storage scaling. Integrations include AWS KMS for encryption, Amazon CloudWatch for monitoring, and Amazon EventBridge for events.

🔒 Today, AWS announces AWS Continuum, which discovers, prioritizes, validates, and remediates security risks at machine speed within guardrails you define. It ingests findings from existing tools and its own scans, builds an environment-aware context graph to prioritize issues, validates exploitability with reproducible proofs in isolated sandboxes, and applies fast, reversible mitigations followed by durable fixes. Continuum integrates with services like Amazon GuardDuty and AWS Security Hub, and previews include Continuum penetration testing, code scanning, and automated threat modeling in STRIDE format.

🔒 AWS Secrets Manager introduces a secret safety skill in the aws-core plugin for the Agent Toolkit for AWS, enabling AI coding agents to use secrets without exposing values to models or session logs. The skill prevents models from requesting raw secret values and prompts developers to clarify intent while constructing commands that reference secrets. A child process resolves secret references at execution time, keeping plaintext secrets out of agent context and logs. The feature is available across supported agent harnesses and Regions where Secrets Manager is offered.

🚀 Amazon Bedrock Managed Knowledge Base is now generally available as a fully managed retrieval-augmented generation (RAG) service. The offering removes the need to manage vector databases, data pipelines, and retrieval infrastructure by handling ingestion, storage optimization, and advanced retrieval. It supports six native connectors—S3, SharePoint, Confluence, Google Drive, OneDrive, and a web crawler—with automatic syncing and managed vector storage tuned for price-performance. Native integration with Amazon Bedrock AgentCore provides auto-generated permissions and observability for agent deployments.

🔍 AWS Security Agent, now part of AWS Continuum, introduces an AI-powered threat modeling capability in public preview that automatically generates threat models from design documents or source code. The agent analyzes application architecture, data flows, and trust boundaries to identify threats across all six STRIDE categories and recommends mitigations. Developers can integrate the agent into IDEs such as Kiro and Claude Code for early design-phase assessments, while security teams can perform pre-deployment reviews. The feature is available in all regions supported by AWS Security Agent at no extra cost during the preview.

🔒 AWS Security Agent (now part of AWS Continuum) adds support for Kiro and Claude Code, enabling developers to trigger security scans directly from their development environment. The agent now validates code scanner findings by simulating exploits in a sandbox to provide proof of exploit, reducing false positives and improving prioritization. Integrations include GitLab.com, GitLab Self Managed, GitHub Enterprise, Bitbucket, and Confluence, and features are available in all supported regions.

📧 Microsoft’s benchmarking suggests Defender for Office 365 catches most malicious and spam email pre-delivery and removes nearly all threats that reach inboxes, with integrated partners adding negligible improvement. Experts caution against interpreting raw catch rates as proof that one-vendor stacks suffice, noting that small percentages can still represent high-impact incidents and that diverse tools and detection methods remain valuable.

🛡️ Amazon Bedrock Guardrails introduces the InvokeGuardrailChecks API, a resourceless endpoint that lets you apply individual safeguards at any step of agentic AI workflows without creating guardrail resources. The API returns numeric severity and confidence scores so you can set custom thresholds and actions — block, pass, retry, or log — per request. It supports content filters, prompt attack detection, and sensitive information filters and is available in multiple AWS Regions.