AWS
Latest AWS news, announcements & analysis
Data
Why AWS Is Buying the DuckDB Database Team
AWS is acquiring DuckLabs, the company behind the popular open-source DuckDB database. The move signals tighter integration of the fast, file-based analytics tool with core AWS services, potentially changing how developers work with data in the cloud.
Taranpreet Singh ·
Infra
AWS Is Adding Two Million More Nvidia GPUs
Amazon Web Services is massively expanding its AI infrastructure, planning to add two million more Nvidia GPUs by 2028. This move signals the immense, ongoing demand for AI computing power among cloud customers.
Ashish Kale ·
AI
AWS Wants AI Agents to Automate Your Dev Work
Amazon has open-sourced Kiro Crew, a new system for managing AI coding agents. It lets developers delegate background tasks like code migrations and incident response, freeing them up for more complex work.
Neeraj Dhiman ·
Infra
Pulumi's New AI Hunts for Hidden Cloud Security Flaws
Pulumi has launched Neo Security, an AI-powered tool that acts like an agent to find complex security vulnerabilities in cloud infrastructure that traditional code scanners often miss. It aims to secure systems by analyzing the entire setup.
Ashish Kale ·
Data
AWS Acquires DuckDB and Pledges to Keep It Open
Amazon Web Services (AWS) has acquired DuckLabs, the company behind the popular open-source database DuckDB. Despite the acquisition, DuckDB's projects will remain free and open-source under the MIT license, managed by the independent DuckDB Foundation.
Taranpreet Singh ·
Infra
The Cloud Service That Started It All Turns 20
Amazon EC2, the service that launched the public cloud, just turned twenty. It started with a single server type in one location and has since become the foundation for millions of applications and businesses worldwide.
Ashish Kale ·
Data
Critical PostgreSQL Update Fixes 28 Security Flaws
The PostgreSQL team has released a critical security update for all supported versions, patching 28 vulnerabilities and over 110 bugs. This major release requires immediate attention from anyone running a PostgreSQL database to prevent potential exploits.
Taranpreet Singh ·
Infra
AWS Tool Stops AI Agents From Making Risky Moves
AWS has launched Dogwood, a new open-source tool for AI agents. It prevents them from taking individually valid actions that become dangerous in sequence, giving developers more control over agent safety and reliability.
Ashish Kale ·
Infra
Manage All Your AI Models Through Your AWS Bill
Vercel's AI Gateway is now on the AWS Marketplace, letting teams buy and manage access to hundreds of AI models directly through their AWS account. This simplifies billing and cost control for companies using multiple AI services.
Ashish Kale ·
Data
Postgres Backups Get a Major Hybrid Cloud Boost
The popular PostgreSQL backup tool pgBackRest now supports AWS S3 Outposts, making it easier to manage backups in hybrid cloud environments. The update also adds support for the upcoming PostgreSQL 19, helping teams prepare for the future.
Taranpreet Singh ·
Infra
AWS Removes a Major Lambda Code Storage Limit
AWS Lambda no longer enforces its 75 GB per-region code storage quota for functions stored in your own S3 bucket. This change helps large organizations scale their serverless applications without hitting a previously restrictive account-wide limit.
Ashish Kale ·
Infra
Build Serverless Apps That Run on Any Cloud
A new architectural approach uses Clean Architecture to make serverless applications portable. This lets developers write business logic once and deploy it across multiple clouds like AWS and Azure, avoiding expensive vendor lock-in.
Ashish Kale ·
Infra
New AWS Agent Finds and Fixes Cloud Overspending
AWS has launched a new managed service called FinOps Agent. It automatically investigates cost spikes, finds the cause, and sends alerts to the right teams through tools like Slack and Jira to help control cloud spending.
Ashish Kale ·
Infra
AWS Tool Helps Prevent Certificate Expiration Outages
AWS has released a new open-source tool to automatically manage and refresh application certificates and secrets. It aims to prevent common outages caused by expirations and works across different cloud environments, not just AWS.
Ashish Kale ·
AI
How an Engineer Used AI to Find Security Flaws
A software engineer used GitHub Copilot, Claude, and Gemini to find security vulnerabilities in the ClickHouse codebase. This practical case study shows how AI can help developers without deep security expertise improve software security.
Neeraj Dhiman ·
Security
New AI Coalition to Find and Fix Open Source Flaws
Cybersecurity firm Chainguard has launched Athena, an industry coalition using AI to find and fix vulnerabilities in critical open-source software. The group aims to secure the foundational components of the internet before attackers can exploit them.
Neeraj Dhiman ·
AI
Why Slack Moved Its AI to Multiple Clouds
Slack shared its four-phase journey from a single-cloud AI setup to a multi-cloud platform using both AWS Bedrock and Google Vertex AI. The move offers a valuable roadmap for companies seeking more flexible and resilient AI infrastructure.
Neeraj Dhiman ·
Infra
AWS Launches First Cloud Servers with PCIe 6.0
AWS is now the first cloud provider to offer servers with PCIe 6.0, beating rivals like Intel and AMD to the milestone. The new Graviton5 instances provide significantly faster data transfer for demanding workloads.
Ashish Kale ·
AI
OpenAI Is Using AI to Fix Open-Source Flaws
OpenAI is now using AI to automatically find and fix security bugs in popular open-source projects. The "Patch the Planet" initiative aims to secure the software supply chain that underpins countless enterprise applications.
Neeraj Dhiman ·
AI
Simple Config Flaws Are Hurting Your AI Agent
Researchers have identified common "smells"—structural flaws in AI agent configuration files. These issues can waste tokens, bloat context, and make your coding assistants less reliable and more expensive to run.
Neeraj Dhiman ·
AI
This AI Finds Security Flaws Others Refuse To
A new AI model is designed specifically for security testing, unlike major models that refuse such tasks. It helps smaller companies find and fix vulnerabilities that might otherwise be missed, leveling the playing field against attackers.
Neeraj Dhiman ·
Infra
Keep Your Users Logged In During AWS Outages
Amazon Cognito now automatically copies user data to a backup region. This means if one AWS region fails, your application can still authenticate users from another, improving reliability and simplifying disaster recovery for developers.
Ashish Kale ·
Infra
Amazon ECS Now Scales Your Apps Much Faster
Amazon ECS can now adjust application capacity much faster, thanks to new high-resolution metrics. This allows services to react to traffic spikes in seconds instead of minutes, improving performance and potentially lowering cloud costs.
Ashish Kale ·
AI
Cloudflare Built an AI Team to Find Code Flaws
Cloudflare has detailed its new system that uses multiple AI models working together to find security vulnerabilities. This multi-agent approach offers a powerful blueprint for companies looking to automate and improve their own code security.
Neeraj Dhiman ·
Infra
AWS Lets You Supervise AI Coders From Your iPhone
AWS has launched a new iOS app for its Kiro development tool. It lets developers monitor, guide, and approve code written by AI agents directly from their iPhone, without needing a laptop.
Ashish Kale ·
Infra
How One Hot AWS Server Halted Coinbase Trading
Coinbase revealed a simple cooling failure in one AWS data center caused its multi-hour trading outage. The incident shows how small hardware problems can trigger massive disruptions for even the largest cloud-dependent companies.
Ashish Kale ·
Tech
A Federal Lawsuit Could Reshape Fintech Rules
The US government is suing New Mexico to assert federal control over prediction markets. The case could decide whether emerging tech faces a single set of federal rules or a complex patchwork of state laws.
Navdeep Kaur Mahal ·
Infra
AWS Now Lets You Bill AI Bots for Content
AWS WAF has a new feature that lets website owners charge AI bots for accessing their content. This allows publishers to create new revenue streams from AI traffic directly at the network edge, without any code changes.
Ashish Kale ·
Security
Testing Driver Flaws Without Hardware
Security researchers have detailed a method for interacting with and testing Windows kernel-mode drivers without the physical hardware they control. This approach simplifies vulnerability analysis, allowing security teams to evaluate driver exploits that are normally gated by the presence of specific hardware components.
Neeraj Dhiman ·
Infra
Manage AWS ECS From Your Desktop Without the Console
A developer has released Mercek, a free, open-source desktop IDE for managing AWS ECS. The tool aims to provide a user-friendly interface, similar to Lens for Kubernetes, removing the need to use the AWS web console for every task.
Ashish Kale ·
Security
Multiple Security Flaws Found In MediaWiki
Multiple vulnerabilities have been discovered in MediaWiki, the popular open-source wiki software. The flaws could allow attackers to determine if users have two-factor authentication enabled and to view the titles of intentionally hidden log entries, posing a risk to user privacy and site security.
Neeraj Dhiman ·
Security
Ubuntu Patches Critical Linux Kernel Flaws
Ubuntu has released security updates for the Linux kernel. The patches address several vulnerabilities, including a critical flaw known as 'Copy Fail' that could allow a local attacker to gain higher privileges or escape from a container environment. All users should update their systems promptly.
Neeraj Dhiman ·
Security
Linux Kernel Flaws Let Attackers Escape Azure Containers
Multiple high-severity vulnerabilities have been found in the Linux kernel for Azure FIPS environments. Attackers could exploit these flaws to gain higher privileges or even escape from software containers, posing a serious risk to regulated workloads.
Neeraj Dhiman ·
Security
Recent Flaws Highlight Systemic Risks
A series of high-impact security incidents, including a mail server zero-day, poisoned npm packages, and a fake AI repository, highlight a dangerous trend. Attackers are exploiting single points of failure in software supply chains and cloud infrastructure to launch widespread, cascading attacks.
Neeraj Dhiman ·
Security
Microsoft Defender Flaws Actively Exploited
Microsoft has revealed that two vulnerabilities in its Defender security software are being actively exploited. One is a privilege escalation flaw (CVE-2026-41091) that could allow an attacker to gain SYSTEM-level access, while the other is a denial-of-service flaw. Both are being used in real-world attacks.
Neeraj Dhiman ·
Security
This Week In Major Security Flaws
This week's security landscape saw several critical developments. A new vulnerability was discovered in the Linux kernel, while a significant exploit targeted Palo Alto Networks' PAN-OS. Additionally, the use of AI in crafting sophisticated attacks is on the rise, alongside new OAuth-based phishing campaigns.
Neeraj Dhiman ·
Security
Ubuntu Patches Multiple Linux Kernel Flaws
Ubuntu has released a security update for its low-latency Linux kernel, addressing several vulnerabilities. These flaws, found in the SMB, Netfilter, and io_uring subsystems, could potentially allow an attacker to compromise a system. The update is part of Ubuntu's regular maintenance and security program.
Neeraj Dhiman ·
Security
Ubuntu Patches Key PostgreSQL Flaws
Ubuntu has issued a security notice for two PostgreSQL vulnerabilities. The first flaw could allow an attacker to execute arbitrary SQL functions due to an authorization issue. The second could lead to a server crash or denial of service from mishandled large user inputs. Updates are available.
Neeraj Dhiman ·
Security
Ubuntu Patches Multiple Linux Kernel Flaws
Ubuntu has released a security update addressing several vulnerabilities discovered in the Linux kernel. The flaws affect various subsystems, including ARM64 and x86 architectures, drivers, and core frameworks. An attacker could potentially exploit these issues to compromise a system, making the update essential for users.
Neeraj Dhiman ·
Security
Critical Luanti Flaws Allow Code Execution
Two security vulnerabilities have been discovered in Luanti. The first (CVE-2026-40959) could allow an attacker to execute arbitrary code by bypassing sandbox restrictions. The second flaw could grant unintended access to insecure environments or the HTTP API, posing significant security risks to affected systems.
Neeraj Dhiman ·