DevOps

Today’s signal The Hacker News recently reported SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access. Published context: July 19, 2026. A previously undocumented threat actor has been attributed to the exploitation of recently disclosed SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances as zero-days prior their public disclosure since June 22, 2026. Cybersecurity company Volexity is tracking the activity under the moniker UTA0533. The discovery was made following an incident res ...

Today’s signal AWS What’s New recently reported Amazon RDS and Aurora now support R8g and M8g database instances in additional AWS Regions. Published context: July 15, 2026. AWS Graviton4-based R8g database instances are now generally available for Amazon Aurora (MySQL and PostgreSQL compatibility) and Amazon RDS for PostgreSQL, MySQL, and MariaDB in Asia Pacific (Hyderabad, Melbourne, Malaysia), Europe (London, Paris, Zurich), AWS GovCloud (US-East), South America (Sao Paulo), and Mexico (Central) regions. Additionally, M8g ins ...

Today’s signal AWS What’s New recently reported AWS IAM Identity Center achieves FedRAMP Class C Certification. Published context: July 14, 2026. AWS IAM Identity Center is now in scope for FedRAMP Class C in the US East (Ohio), US East (N. Virginia), US West (N. California), and US West (Oregon) Regions. You can now use IAM Identity Center to enable workforce access to AWS accounts and applications that are subject to FedRAMP Class C compliance. The Federal Risk and Authorization Management Program ( ...

Today’s signal AWS What’s New recently reported Amazon Aurora DSQL is now in scope for FedRAMP Moderate. Published context: July 16, 2026. Amazon Aurora DSQL is now in scope for FedRAMP Moderate in the US East (Ohio), US East (N. Virginia), and US West (Oregon) Regions. You can now use Aurora DSQL to build applications and run workloads that are subject to FedRAMP Moderate compliance requirements. The Federal Risk and Authorization Management Program (FedRAMP) is a US government-wide program th ...

Today’s signal The Hacker News recently reported GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft. Published context: July 17, 2026. Cybersecurity researchers have attributed the April 2026 DigiCert security incident to a threat activity cluster dubbed CylindricalCanine. Expel, which shared technical details of the event, described the threat actor as a sub-group of GoldenEyeDog (aka APT-Q-27, Dragon Breath, and Miuuti Group), a Chinese cybercrime group known for its targeting of the gamb ...

Today’s signal AWS What’s New recently reported Amazon S3 Event Notifications now include system-generated tags. Published context: July 16, 2026. Amazon S3 Event Notifications now include system-generated tags in events delivered to all destinations including Amazon EventBridge, Amazon SQS, Amazon SNS, and AWS Lambda. System-generated tags are metadata labels attached to your bucket by AWS services. You can use these tags to filter events from thousands of buckets with a single EventBridge rule, inste ...

Today’s signal The Hacker News recently reported CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV. Published context: July 17, 2026. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly patched security flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the fixes by July 19, 2026. The vulnerability in question is CVE-2026-58644 (CVSS scor ...

Today’s signal AWS What’s New recently reported Amazon EC2 now surfaces the public SSM parameters associated with public AMIs. Published context: July 16, 2026. Amazon EC2 now surfaces the AWS Systems Manager (SSM) Parameter Store parameters associated with public AMIs directly in the AMI metadata. When you describe a public AMI, the response includes the associated public SSM parameter, making it easy to discover and reference in your configurations. Previously, finding the SSM parameter associated with a public AM ...

Today’s signal The Hacker News recently reported Zoom Patches Critical Windows Flaw That Could Enable Account Takeover. Published context: July 16, 2026. Zoom has released security updates for a critical security flaw impacting Zoom Workplace for Windows that could facilitate account takeover. The vulnerability, tracked as CVE-2026-53412 (CVSS score: 9.8), affects Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows. “Improper Input Validation in Zoom Desktop Client f ...

Today’s signal AWS What’s New recently reported Amazon EC2 M8in, M8idn, M8ib, M8idb instances are now available in additional regions. Published context: July 14, 2026. Starting today, Amazon Elastic Compute Cloud (Amazon EC2) M8in, M8idn network optimized, and M8ib, M8idb EBS optimized instances are available in the AWS US East (Ohio), Europe (Ireland), and Asia Pacific (Tokyo) regions. The new instances are powered by custom sixth generation Intel Xeon Scalable processors available only on AWS and deliver up to 43% higher ...

Today’s signal The Hacker News recently reported Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack. Published context: July 14, 2026. Microsoft shipped its largest Patch Tuesday on record today, and two of the fixes close holes that attackers are already exploiting. The release covers 622 of Microsoft’s own CVEs by its Security Update Guide count, more than triple June’s previous high of around 200. Those two live bugs are the ones to grab first. Microsoft credits incident responders for b ...

Today’s signal AWS What’s New recently reported Introducing Amazon GuardDuty AI Protection for AWS AI workloads. Published context: July 14, 2026. Amazon GuardDuty now offers AI Protection, expanding threat detection to AWS AI services including Amazon Bedrock and Amazon SageMaker. As organizations rapidly adopt AI, security teams may lack visibility into threats specifically targeting AI workloads, such as anomalous model invocations, cost harvesting attacks, and prompt injection attempts. GuardDuty A The reason this matters is simple: buyers are paying attention to speed, operational resilience, and credible technical execution. A trending story can create awareness, but the business question is what a team should do with that attention. ...