All news in category “Vendor and Hyperscaler Watch”

🔍 ESET’s threat research team combines telemetry, incident investigation and curated intelligence to help SMBs understand attacker methods and improve detections. Through MDR the company layers human-led hunting and rapid, tailored responses on top of endpoint protection, giving organizations clearer visibility and faster containment. This practical blend of technology and expertise makes advanced defence accessible without the cost of an in-house SOC.

🔁 Amazon OpenSearch Service introduces a new Capacity Optimized deployment option for blue/green updates, allowing domain updates to complete even when full instance capacity is not available. The option attempts a full-capacity swap first and automatically falls back to batched, incremental updates if necessary, reducing the number of extra instances required during the process. This approach can take longer than a full swap but avoids waiting for capacity; customers can choose the strategy in the console or API. AWS recommends Capacity Optimized for clusters with 30 or more nodes.

🩺 Amazon Connect Health is now generally available, delivering purpose-built agentic AI to healthcare organizations to streamline patient engagement and point-of-care workflows. The service launches five prebuilt AI agents — including patient verification and ambient documentation (GA) plus preview features for appointment management, patient insights, and medical coding — to reduce administrative burden and speed access to care. Features are HIPAA-eligible, follow responsible AI best practices, and integrate with Amazon Connect, EHRs, and telehealth systems for rapid deployment.

🩺 AWS announced the AWS HealthLake data transformation agent (preview), an AI-powered feature that converts CCDA clinical documents into FHIR R4-compliant resources. Developers can run synchronous conversions, preview and validate transformed FHIR Bundles in seconds, and use a scalable bulk import workflow that matches patients and logs ingestion details. The console offers AI-assisted natural language template customization plus manual editing before publishing for production.

⚡ AWS announces the new Lambda durable functions Kiro power, bringing durable function development capabilities directly into the Kiro agentic AI environment for local developers. The power provides AI-assisted guidance to build resilient, long-running, multi-step applications faster, covering replay model practices, step-and-wait operations, concurrency patterns, and error-handling strategies. It supports deployment workflows with AWS CloudFormation, AWS CDK, and AWS SAM and is available today with one-click installation from the Kiro IDE and Kiro powers page, plus example code and documentation on GitHub and in the AWS developer guide.

🚀 Cloudflare rebuilt the Cloudflare One Client’s proxy mode to use QUIC streams and HTTP/3 CONNECT, removing the prior L4→L3 translation via smoltcp and deprecating WireGuard for proxy mode. The change keeps traffic at Layer 4, enabling native congestion and flow control, transport tunability, and substantially better throughput and latency in internal tests. Administrators should upgrade to minimum client version 2025.8.779.0 and enable MASQUE local proxy mode to benefit from these gains.

🔁 Automatic Return Routing (ARR) is a new Cloudflare One feature, released in Closed Beta, that resolves private IP address overlap by tracking flows and returning traffic to the exact tunnel that originated the conversation. Instead of depending on routing-table lookups, ARR uses stateful flow memory to record the originating tunnel and enforce symmetric returns. This approach minimizes the need for VRF or NAT, reducing operational overhead for mergers, extranets, and uniform branch deployments while integrating with Unified Routing and the Apollo userspace hub.

🔒 AWS completed its annual recertification audit with no findings, extending its ISO and CSA STAR coverage. The update adds the Asia Pacific (Taipei) Region and AWS Deadline Cloud to the scope and reconfirms compliance with standards including ISO 9001, 27001, 27017, 27018, 27701, 20000-1, and 22301. These certifications underscore AWS's commitment to robust security, privacy, and service management controls. Customers can view certificates via AWS Artifact or the AWS ISO and CSA STAR Certified page.

🔐 Bitwarden now supports logging into Windows 11 using passkeys stored in the Bitwarden vault, enabling phishing‑resistant, passwordless sign-in across devices. The capability is available on all plans, including the free tier, and uses a QR scan and mobile confirmation to release a vault‑stored Entra ID passkey. Required: Entra ID–joined devices, FIDO2 sign‑in enabled, and a registered Entra ID passkey in the vault. Microsoft will roll out the Windows support this month, subject to Entra configuration.

⚙️ Amazon EC2 M8g instances are now available in Africa (Cape Town), Asia Pacific (Malaysia), Europe (Milan, Zurich), and Canada West (Calgary). Built on the AWS Graviton4 processors and the AWS Nitro System, M8g delivers up to 30% better performance versus Graviton3 and provides larger sizes with up to 3x more vCPUs and memory. The family includes 12 sizes (two bare metal) with up to 50 Gbps networking and 40 Gbps EBS bandwidth, targeting general-purpose workloads and migrations to Graviton.

🔐 AWS Identity and Access Management (IAM) now lets you create and configure IAM roles directly within many service console workflows, so you no longer need to switch to the IAM console. A new in-context permissions panel appears during relevant tasks and supports default policies or a simplified statement builder for custom permissions, while retaining full IAM role-management capabilities. Initially available in the US East (N. Virginia) Region, the feature will roll out to additional services and regions. This streamlines role setup for services such as EC2, Lambda, EKS and more.

🔍 Modern security frameworks — including AI, automation, and Zero Trust — depend on deep, trustworthy visibility to function effectively. An October 2025 Forrester study commissioned by NETSCOUT reports that 72% and 69% of organizations view NAV and packet-level visibility as essential to threat hunting, detection, and incident response. Omnis Cyber Intelligence offers packet-level fidelity, behavioral analytics, unified hybrid visibility, context-rich metadata, and retrospective investigation to strengthen detection, validation, and safe automation.

🔍 A commissioned Forrester Consulting study for NETSCOUT (October 2025) reports that 61% of respondents say analysts spend more than ten hours a week in the analyze phase. The piece argues this is not a time-management issue but a clarity problem caused by partial context, dispersed data, and incomplete logs that force manual correlation. It highlights how stronger Network Analysis and Visibility (NAV) can shrink investigations and reduce burnout, and positions Omnis Cyber Intelligence as a platform delivering packet-level truth, correlated metadata, hybrid visibility, and simplified, three-click investigations.

🔍 Amazon SageMaker HyperPod now provides integrated observability for Restricted Instance Groups (RIG), giving teams training foundation models with Nova Forge a unified view of compute resources and training workloads. A pre-configured Amazon Managed Grafana dashboard, backed by Amazon Managed Service for Prometheus, aggregates metrics from four exporters to show GPU utilization, NVLink bandwidth, CPU pressure, FSx for Lustre usage, network fabric, Kubernetes state, and curated logs including epoch progress, step-level logs, pipeline errors, and Python tracebacks. Observability is automatically enabled for new RIG clusters and can be turned on for existing clusters via the HyperPod console; it is available in all Regions where SageMaker HyperPod RIG is supported.

🔐 AWS now includes the ARN of the policy that caused an AccessDenied error for same-account and same-organization requests. This enhancement adds only the policy ARN (not policy content) for SCPs, RCPs, permissions boundaries, session policies, and identity-based policies, and does not change authorization logic. The rollout begins early 2026 across all Regions, improving troubleshooting and cross-team communication.

🤖 Amazon Lightsail now lets you deploy OpenClaw, a private self-hosted AI assistant, on your own cloud infrastructure with simple, secure defaults. Each Lightsail OpenClaw instance includes built-in security controls—sandboxed agent sessions, one-click HTTPS for TLS, device-pairing authentication, and automatic snapshots—reducing manual configuration and operational risk. Amazon Bedrock is the default model provider, and users can swap models or connect to Slack, Telegram, WhatsApp, and Discord as needed.

🚗 BMW Group and Google Cloud present a proof-of-concept pipeline to compress, fine-tune, evaluate, and deploy domain-specific small language models (SLMs) for in-vehicle voice commands. They position SLMs as a practical compromise between full cloud-based LLMs and constrained onboard hardware, reducing latency and network dependence. Using Vertex AI Pipelines, the automated workflow explores quantization, pruning, distillation, LoRA fine-tuning, and RL-based alignment, and validates models on Android/AOSP head-unit environments. The team publishes the pipeline code to encourage reuse and reproducible experimentation.

🚀 H4D VMs are now generally available on Google Cloud, powered by 5th Gen AMD EPYC processors and featuring Cloud RDMA on the Titanium network adapter. They deliver substantial throughput and scaling gains across HPC domains—healthcare, manufacturing, EDA and weather—while supporting Slurm and GKE orchestration, Cluster Toolkit, Google Cloud Batch and DWS consumption models. Google cites multi-node benchmark speedups up to 5.8× and access to compute as low as $0.03 per core‑hour.

⚙️ The Azure IaaS Resource Center centralizes guidance, demos, architectures, and best practices to help teams design, optimize, and operate cloud infrastructure across compute, storage, and networking. It advocates a system-level approach that unifies hardware, intelligent software, networking, and orchestration to deliver consistent performance and resiliency. The center highlights built-in security, AI-ready VM families, scalability options, and cost-optimization tools to align infrastructure decisions with business outcomes.

🔒 FortiAIGate provides dedicated runtime protection for private AI and LLM deployments by monitoring every input and output between applications and models. It detects and blocks threats such as prompt injection, jailbreaking, model poisoning, data exfiltration, and excessive compute abuse while enforcing governance policies in real time. Built for Kubernetes and hybrid environments, it integrates with Fortinet Security Fabric, offers dashboards mapping OWASP Top 10 LLM risks, and uses multi‑GPU and SmartNIC acceleration to preserve performance and control costs.