Daily Brief

Today’s signal The Hacker News recently reported GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft. Published context: July 17, 2026. Cybersecurity researchers have attributed the April 2026 DigiCert security incident to a threat activity cluster dubbed CylindricalCanine. Expel, which shared technical details of the event, described the threat actor as a sub-group of GoldenEyeDog (aka APT-Q-27, Dragon Breath, and Miuuti Group), a Chinese cybercrime group known for its targeting of the gamb ...

Today’s signal AWS What’s New recently reported AWS Control Tower Account Factory for Terraform now re-applies customizations when accounts move between OUs. Published context: July 16, 2026. AWS Control Tower Account Factory for Terraform (AFT) can now automatically re-apply an account’s customizations when that account moves to a different Organizational Unit (OU). Previously, moving an enrolled account between OUs required manually triggering customization re-application, creating operational overhead and risk of configuration drift. With this ...

Today’s signal AWS What’s New recently reported Amazon S3 Event Notifications now include system-generated tags. Published context: July 16, 2026. Amazon S3 Event Notifications now include system-generated tags in events delivered to all destinations including Amazon EventBridge, Amazon SQS, Amazon SNS, and AWS Lambda. System-generated tags are metadata labels attached to your bucket by AWS services. You can use these tags to filter events from thousands of buckets with a single EventBridge rule, inste ...

Today’s signal AWS What’s New recently reported Amazon GameLift Streams now supports IAM role credentials for stream sessions. Published context: July 17, 2026. Amazon GameLift Streams now supports assigning an IAM role to a stream session, enabling your application to securely access resources in your AWS account, such as Amazon S3 buckets and DynamoDB tables. With this launch, you can pass a RoleArn parameter when starting a stream session, and your application automatically receives short-lived, auto-refreshing A ...

Today’s signal The Hacker News recently reported CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV. Published context: July 17, 2026. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly patched security flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the fixes by July 19, 2026. The vulnerability in question is CVE-2026-58644 (CVSS scor ...

Today’s signal AWS What’s New recently reported Amazon Managed Grafana achieves FedRAMP High authorization in AWS GovCloud (US). Published context: July 16, 2026. Amazon Managed Grafana is now a FedRAMP High authorized service in the AWS GovCloud (US-East) and AWS GovCloud (US-West) regions. Federal agencies, public sector organizations, and other enterprises with FedRAMP High compliance requirements can now use Amazon Managed Grafana to visualize, query, and alert on operational metrics across their AWS and hybrid en ...

Today’s signal AWS What’s New recently reported Amazon EC2 now surfaces the public SSM parameters associated with public AMIs. Published context: July 16, 2026. Amazon EC2 now surfaces the AWS Systems Manager (SSM) Parameter Store parameters associated with public AMIs directly in the AMI metadata. When you describe a public AMI, the response includes the associated public SSM parameter, making it easy to discover and reference in your configurations. Previously, finding the SSM parameter associated with a public AM ...

Today’s signal TechCrunch recently reported Yes, you can now order DoorDash from the command line. Published context: July 16, 2026. DoorDash is opening a limited beta of dd-cli, a command-line tool that lets developers and AI agents search stores, build carts, and place orders from the terminal, marking another step toward software designed for AI agents instead of just humans. The reason this matters is simple: buyers are paying attention to speed, operational resilience, and credible technical execution. A trending story can create awareness, but the business question is what a team should do with that attention. ...

Today’s signal The Hacker News recently reported Zoom Patches Critical Windows Flaw That Could Enable Account Takeover. Published context: July 16, 2026. Zoom has released security updates for a critical security flaw impacting Zoom Workplace for Windows that could facilitate account takeover. The vulnerability, tracked as CVE-2026-53412 (CVSS score: 9.8), affects Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows. “Improper Input Validation in Zoom Desktop Client f ...

Today’s signal AWS What’s New recently reported Amazon CloudWatch Logs announces intelligent tiering for storage. Published context: July 15, 2026. Amazon CloudWatch Logs now supports intelligent storage tiering, which automatically classifies your log data across three storage tiers - Standard (existing), Infrequent Access, and Archive Instant Access based on access patterns. This allows you to store logs in Amazon CloudWatch for extended periods at lower-cost tiers without any operational overhead. Wi ...

Today’s signal AWS What’s New recently reported Amazon EC2 M8in, M8idn, M8ib, M8idb instances are now available in additional regions. Published context: July 14, 2026. Starting today, Amazon Elastic Compute Cloud (Amazon EC2) M8in, M8idn network optimized, and M8ib, M8idb EBS optimized instances are available in the AWS US East (Ohio), Europe (Ireland), and Asia Pacific (Tokyo) regions. The new instances are powered by custom sixth generation Intel Xeon Scalable processors available only on AWS and deliver up to 43% higher ...

Today’s signal AWS What’s New recently reported Amazon Cognito now supports importing users with password hashes. Published context: July 15, 2026. Amazon Cognito now supports importing users with password hashes in CSV user imports. Previously, users imported from a CSV file had to reset their passwords on first sign-in. Now, you can include password hashes in your CSV file so that imported users can sign in immediately with their existing credentials. When creating a CSV import, you specify the passwo ...