All news in category “Vendor and Hyperscaler Watch”

🚀 AWS announced the general availability of CDK Mixins in the aws-cdk-lib, enabling developers to attach composable, reusable abstractions to any construct (L1, L2, or custom) without rebuilding existing infrastructure code. Mixins use a concise .with() syntax to add behaviors like auto-delete, bucket encryption, versioning, and block public access, and multiple Mixins can be combined into custom L2 constructs. Teams can apply Mixins across scopes or use Mixins.of() for resource-type or path-pattern filtering, helping enforce reusable security and compliance policies while preserving day-one access to new AWS features.

⚠️ Building LLM applications on Vertex AI can trigger 429 errors when request rates exceed available throughput, degrading user experience and increasing retries. This article explains consumption options—Standard and Priority PayGo, Provisioned Throughput, Flex PayGo, and Batch—and prescribes five operational practices: smart retries, global model routing, context caching, prompt optimization, and traffic shaping. Combining these approaches (for example PT for critical real-time traffic and Batch for latency-tolerant jobs) helps preserve performance and control costs.

🔔 Amazon announced that AgentCore Memory for Bedrock now supports streaming notifications for long-term memory, delivering push events to Amazon Kinesis whenever memory records are created or modified. Developers can subscribe to these streams to trigger downstream workflows, refresh application state, and build audit trails without polling. This reduces developer overhead and simplifies integration of personalized, memory-driven experiences. The feature is available in 15 AWS Regions.

⚡ AWS Glue zero-ETL now supports configurable change data capture (CDC) refresh intervals and on-demand ingestion for Amazon DynamoDB sources. You can set refresh windows from 15 minutes up to 6 days, letting teams balance data freshness and cost, and trigger immediate ingestion for urgent updates. These enhancements align DynamoDB zero-ETL integrations with SaaS sources such as Salesforce, SAP, and ServiceNow. The capabilities are available today in all regions where zero-ETL is supported.

🔒 Google Cloud’s Sensitive Data Protection (SDP) now applies advanced AI context classifiers and image object detectors to identify and redact sensitive content across text and images. It detects medical and financial contexts, faces, passports, credit cards, and other PII, and can generate redacted versions so organizations keep valuable training data while protecting privacy. SDP supports both Vertex AI tuning and live agent interactions and integrates with Model Armor, Security Command Center, and contact center solutions.

🛡️ Microsoft published updated email security benchmarks comparing Defender, secure email gateways (SEGs), and integrated cloud email security (ICES) solutions. The data shows Microsoft Defender removes an average of 70.8% of malicious email post-delivery, with ICES partners contributing the remaining 29.2% of post-delivery remediation. Layering matters: integrated ICES solutions improve marketing and bulk filtering by an average of 13.7%, while incremental gains for spam and malicious filtering were modest (around 0.29% and 0.24% respectively). The report also compares misses per 1,000 users, showing Defender had fewer high-severity misses than several evaluated SEG vendors.

⚡ Amazon EC2 M8i and M8i-flex instances are now available in Europe (Ireland) and Europe (London). Powered by AWS-exclusive custom Intel Xeon 6 processors, they deliver up to 15% better price-performance and 2.5x the memory bandwidth versus previous Intel-based instances. AWS reports up to 20% higher general compute performance versus M7i, with specific workload gains—up to 30% for PostgreSQL, 60% for NGINX web applications, and 40% for deep learning recommendation models. M8i-flex targets common general-purpose sizes while M8i offers larger and SAP-certified configurations including a new 96xlarge.

💰 Google paid $17.1 million to 747 security researchers in 2025 through its Vulnerability Reward Program, an all-time annual high and more than a 40% increase over 2024. The company said it has awarded over $81.6 million in bounties since 2010, with the top single reward reaching $250,000. In 2025 Google launched an AI Vulnerability Rewards Program, added AI-focused categories to the Chrome VRP, and introduced a rewards track for OSV-SCALIBR. Program-specific payouts included Android & Google Devices (~$2.9M), Chrome (~$3.72M), and Cloud (~$3.57M).

🏆 At Fortinet Accelerate 2026, Fortinet honored the 2025 Partner of the Year Award winners for outstanding contributions to secure networking, cloud modernization, OT protection, and managed services across the Americas, APAC, and EMEA. Winners — from global system integrators like HCLTech and NTT DATA to distributors such as TD SYNNEX and regional leaders — demonstrated excellence in customer success, innovation, and technical execution. The awards highlight partner adoption of the Fortinet Security Fabric to reduce complexity and converge networking and security for hybrid and distributed environments. Recognition also emphasized growth in Unified SASE, SecOps, MSSP offerings, and OT security implementations.

🖥️ AWS now offers Windows Server 2025 bundles for Amazon WorkSpaces, available for both Personal and Core WorkSpaces. These managed bundles let customers launch Windows Server 2025 instances to run modern applications, including eligible Microsoft 365 Apps for enterprise that require newer Windows. The option introduces enhanced security and firmware protections such as TPM 2.0, UEFI Secure Boot, and Secured-core server, and is available in all Regions where WorkSpaces is offered.

🔐 AWS now supports account regional namespaces for Amazon S3 general purpose buckets, removing the need to find globally unique bucket names and enabling predictable, per-customer or per-team naming. To use it, include the new bucket namespace request header with the CreateBucket API or add your account regional suffix in CloudFormation templates. Security teams can enforce namespace-only creation via SCPs and IAM policies. This feature is available in 37 Regions, including AWS China and GovCloud, at no extra cost.

🔒 AWS Backup now supports protecting Amazon EKS clusters with logically air-gapped vaults. These vaults store immutable backup copies that are locked by default and encrypted with AWS-owned keys or customer-managed keys, and they can hold backups in the same account or across accounts and Regions. You can target a vault as the primary backup or copy destination via the console, API, or CLI, share recovery access through AWS Resource Access Manager (RAM) or multi-party approval, and initiate direct restore jobs from the recipient account without copying first to reduce recovery time.

🛡️ At the Growing Up in the Digital Age Summit in Dublin, Google presented product safeguards and policy principles designed to support teen digital wellbeing, emphasizing defaults like SafeSearch and private YouTube uploads as baseline protections. The company announced improvements to Family Link, a unique option to set Shorts time to zero for supervised teens, and additional Gemini Apps guardrails for users under 18. It also unveiled a $20 million global initiative to create multilingual, open-source wellbeing resources and urged a risk-based approach to age assurance rather than blanket bans.

🔒 Cloudflare today introduced Account Abuse Protection, a suite of fraud-prevention tools that stop fraudulent account creation and takeovers by evaluating authenticity beyond automation signals. The suite combines leaked credential checks and ATO detections with new Disposable email and Email risk scoring plus Hashed User IDs for per-account visibility while preserving privacy. Available in Early Access to Bot Management Enterprise customers, these controls integrate into Security analytics and Security rules to add friction at signup and investigate account-level abuse.

🔒 WhatsApp has begun rolling out parent-managed accounts for pre-teens, enabling guardians to control who can contact their child and which groups they can join. These managed profiles limit the child to messaging and calling, exclude access to Meta AI, Channels, Status, and location sharing, and preserve end-to-end encryption so messages cannot be read by third parties. Setup requires both devices present: parents verify the child's number, scan a QR code to link accounts, and set a 6-digit PIN to lock parental controls. By default children can message only saved contacts and parents must approve group additions; the child can switch to a standard account at 13.

🚀 Amazon Neptune Database is now available in the AWS Asia Pacific (Hyderabad) region. You can create Neptune clusters using R5, R5d, R6g, R6i, X2iedn, T4g, and T3 instance types, and deploy production-ready graph workloads with high availability and automated backups. Neptune supports both Property Graph (Gremlin and openCypher) and RDF (SPARQL) models and offers Neptune Global Database for multi-region replication. Get started via the Console, CLI, or CloudFormation.

🔒 AWS Firewall Manager is now available in the AWS Asia Pacific (New Zealand) Region. The service helps cloud security administrators and site reliability engineers protect applications while reducing the operational overhead of manual rule configuration and management. Customers can use Firewall Manager to create and maintain AWS WAF security policies and apply defense-in-depth controls across AWS security services and accounts.

🚀 Amazon EC2 C8id instances powered by custom Intel Xeon 6 processors are now available in the Europe (Spain) region. They provide up to 384 vCPUs, 768 GiB of memory and 22.8 TB of NVMe SSD storage, offering up to 43% higher compute performance and 3.3× greater memory bandwidth versus prior C6id instances. C8id also delivers up to 46% better I/O performance for database workloads and up to 30% faster query results for I/O-intensive analytics, and supports Instance Bandwidth Configuration to flexibly allocate 25% between network and EBS bandwidth. These instances are suited for compute- and I/O-intensive workloads and are available via Savings Plans, On‑Demand, and Spot purchases.

🚀 AWS has expanded availability of Amazon EC2 C8gd and M8gd instances, adding C8gd in South America (São Paulo) and M8gd in Europe (Ireland). Powered by AWS Graviton4, these instances deliver up to 30% better compute performance than Graviton3-based variants and offer up to 11.4 TB of local NVMe SSD block storage. They provide up to 50 Gbps network and 40 Gbps EBS bandwidth, come in 12 sizes, and include EFA support on the largest sizes. Customers can also adjust network and EBS bandwidth by 25% using EC2 instance bandwidth weighting to better optimize workload throughput.

🚀 Amazon Web Services has made EC2 R7gd instances available in the South America (São Paulo) Region, offering up to 3.8 TB of local NVMe SSD block storage. R7gd instances are powered by AWS Graviton3 processors, paired with DDR5 memory and built on the AWS Nitro System, targeting memory‑intensive workloads such as open‑source databases, in‑memory caches, and real‑time analytics. They provide high‑speed, low‑latency ephemeral storage ideal for scratch space, temporary files, and caching.