Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

Today’s signal The Hacker News recently reported Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells. Published context: September 26, 2026. Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally. The ShinyHunters-linked activity involves the weaponization of CVE-2026-35273 (CVSS score: 9.8), a critical security flaw that could result in unauthenticated remote code execution. The vulnerability ...

September 27, 2026 · 3 min · David Gomez

AWS DataSync launches a monitoring dashboard for tracking task executions across your account

Today’s signal AWS What’s New recently reported AWS DataSync launches a monitoring dashboard for tracking task executions across your account. Published context: September 25, 2026. AWS DataSync now provides a monitoring dashboard in the DataSync console that gives you visibility into your data transfers across your account. For each task execution, you can see its status, data and file transfer rates, duration, and the total data and files transferred. You can filter executions by status, task, task mode, execution ID, or start time to ...

September 27, 2026 · 3 min · David Gomez

Amazon EC2 C8i and C8i-flex instances are now available in additional regions

Today’s signal AWS What’s New recently reported Amazon EC2 C8i and C8i-flex instances are now available in additional regions. Published context: September 25, 2026. Starting today, Amazon Elastic Compute Cloud (Amazon EC2) C8i and C8i-flex instances are available in the AWS European Sovereign Cloud (Germany) region. These instances are powered by custom Intel Xeon 6 processors, available only on AWS, delivering the highest performance and fastest memory bandwidth among comparable Intel processors in the cloud. These C8i ...

September 27, 2026 · 3 min · David Gomez

Show HN: Reladraw – A diagram language where you decide where to place things

Today’s signal Hacker News recently reported Show HN: Reladraw – A diagram language where you decide where to place things. Published context: September 26, 2026. I love making diagrams to help understand, plan, etc. However, the options are (A) auto-placement languages like Mermaid or Graphviz (which don’t let me decide how the diagram looks), or (B) software like Draw.io which are powerful but are very time consuming (and inefficient for agents to manipulate). I wanted to have the benefits of both, where you can def ...

September 27, 2026 · 3 min · David Gomez

Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link

Today’s signal The Hacker News recently reported Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link. Published context: September 26, 2026. Details have emerged about a high-severity security flaw in the Elementor Website Builder WordPress plugin that could be exploited by an unauthenticated attacker to create rogue administrator accounts and take control of a site. The cross-site request forgery (CSRF) vulnerability, which has yet to be assigned a CVE identifier, carries a CVSS score of 8.8 out ...

September 26, 2026 · 3 min · David Gomez

Amazon Connect Customer launches agent-to-agent collaboration

Today’s signal AWS What’s New recently reported Amazon Connect Customer launches agent-to-agent collaboration. Published context: September 22, 2026. Amazon Connect Customer now supports agent-to-agent collaboration, giving customers the choice to bring in specialized AI agents during a live interaction to resolve a customer request. With this launch, Connect Customer AI agents can collaborate with each other, and with AI agents outside Connect Customer, over the open agent-to-agent (A2A) protocol through ...

September 26, 2026 · 3 min · David Gomez

Amazon EC2 R8i and R8i-flex instances are now available in additional regions

Today’s signal AWS What’s New recently reported Amazon EC2 R8i and R8i-flex instances are now available in additional regions. Published context: September 25, 2026. Starting today, Amazon Elastic Compute Cloud (Amazon EC2) R8i and R8i-flex instances are available in the AWS European Sovereign Cloud (Germany) region. These instances are powered by custom Intel Xeon 6 processors, available only on AWS, delivering the highest performance and fastest memory bandwidth among comparable Intel processors in the cloud. The R8i a ...

September 26, 2026 · 3 min · David Gomez

Amazon Transcribe adds customer-managed KMS keys for custom resources

Today’s signal AWS What’s New recently reported Amazon Transcribe adds customer-managed KMS keys for custom resources. Published context: September 25, 2026. Amazon Transcribe now lets you encrypt your custom vocabularies, custom vocabulary filters, and custom language models at rest with a customer-managed AWS KMS key that you own and control. Previously, these custom resources were always encrypted with an AWS owned key. Now you can supply your own symmetric AWS KMS key when you create or update these resources ...

September 26, 2026 · 3 min · David Gomez

Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild

Today’s signal The Hacker News recently reported Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild. Published context: September 25, 2026. The Canadian Centre for Cyber Security has warned that a now-patched Roundcube Webmail vulnerability is being actively exploited in the wild. The vulnerability in question is CVE-2026-48842 (CVSS score: 8.1), a pre-authentication SQL injection in the virtuser_query plugin of Roundcube Webmail versions 1.6.x before 1.6.16 and 1.7.x before 1.7.1. The issue ste ...

September 25, 2026 · 3 min · David Gomez

AWS Security Hub AI Inventory adds Azure self-hosted instance support

Today’s signal AWS What’s New recently reported AWS Security Hub AI Inventory adds Azure self-hosted instance support. Published context: September 22, 2026. AWS Security Hub AI Inventory now supports discovering and cataloging AI assets running on self-hosted instances in Microsoft Azure. This expansion extends Security Hub’s existing self-hosted discovery capabilities beyond AWS, enabling central security teams to gain a continuously updated, organization-wide view of AI assets and their security posture across ...

September 25, 2026 · 3 min · David Gomez

Amazon EventBridge relaunches event buses for enterprise scale

Today’s signal AWS What’s New recently reported Amazon EventBridge relaunches event buses for enterprise scale. Published context: September 24, 2026. Amazon EventBridge relaunches event buses with a new enhanced Custom event bus that lets you build event-driven applications that decouple teams and can scale with your organization. Create a custom event bus, share it across accounts, and now teams can publish and consume events with strict ordering, open event formats, built-in retention, and support for a ...

September 25, 2026 · 3 min · David Gomez

Meet Feather, the startup building the ‘Android of robotics’ for developers

Today’s signal TechCrunch recently reported Meet Feather, the startup building the ‘Android of robotics’ for developers. Published context: September 24, 2026. Feather is betting on a customizable, $30,000 platform built for software developers. The reason this matters is simple: buyers are paying attention to speed, operational resilience, and credible technical execution. A trending story can create awareness, but the business question is what a team should do with that attention. ...

September 25, 2026 · 2 min · David Gomez