Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication

Today’s signal The Hacker News recently reported Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication. Published context: June 13, 2026. Splunk has released security updates to address a critical security flaw in Splunk Enterprise that could be exploited to conduct unauthenticated file operations and even remote code execution. The vulnerability, tracked as CVE-2026-20253, is rated 9.8 on the CVSS scoring system. “In Splunk Enterprise versions below 10.2.4 and 10.0.7, an unauthenticated user ...

June 14, 2026 · 3 min · David Gomez

Amazon CloudWatch Application Signals now supports infrastructure, logs, and traces context...

Today’s signal AWS What’s New recently reported [Amazon CloudWatch Application Signals now supports infrastructure, logs, and traces context for faster troubleshooting](https://aws.amazon.com/about-aws/whats-new/2026/06/cloudwatch-application-signals-supports infrastructure-logs-traces-context-for-faster troubleshooting/). Published context: June 11, 2026. Amazon CloudWatch Application Signals introduces service health ranking on the application map and new infrastructure, logs, and traces tabs on the service overview page. These capabilities let operators triage unhealthy services and inspect the underlying compute environment, log snippets, and trace details in one place, making it easier to find root causes ...

June 14, 2026 · 3 min · David Gomez

Langflow Vulnerability CVE-2026-5027 Exploited for Unauthenticated RCE

Today’s signal The Hacker News recently reported Langflow Vulnerability CVE-2026-5027 Exploited for Unauthenticated RCE. Published context: June 10, 2026. A high-severity security flaw in Langflow, an open-source low-code platform to build artificial intelligence (AI) applications, has come under active exploitation in the wild, according to findings from VulnCheck. The vulnerability in question is CVE-2026-5027 (CVSS score: 8.8), a case of path traversal that could allow an attacker to write files to arbitrar ...

June 13, 2026 · 3 min · David Gomez

Announcing metal-48xl and metal-96xl for Amazon EC2 network/EBS instances

Today’s signal AWS What’s New recently reported Announcing metal-48xl and metal-96xl for Amazon EC2 network/EBS instances. Published context: June 9, 2026. AWS is announcing the general availability of metal-48xl and metal-96xl sizes for Amazon Elastic Compute Cloud (Amazon EC2) M8in, M8ib, M8idn, M8idb, R8in, R8ib, R8idn, and R8idb instances. These instances are powered by custom sixth generation Intel Xeon Scalable processors, available only on AWS and feature the latest sixth generation AWS Nitro cards. Thes ...

June 13, 2026 · 3 min · David Gomez

ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universities

Today’s signal The Hacker News recently reported ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universities. Published context: June 11, 2026. The ShinyHunters extortion crew exploited an unpatched flaw in Oracle PeopleSoft to break into enterprise systems, steal data, and demand payment to keep it private. The campaign hit universities hardest. Google’s Mandiant attributes it to the group it tracks as UNC6240, and dates the activity between May 27 and June 9. Oracle did not publish its advisory un ...

June 12, 2026 · 3 min · David Gomez

Amazon Aurora now supports PostgreSQL major version 18

Today’s signal AWS What’s New recently reported Amazon Aurora now supports PostgreSQL major version 18. Published context: June 11, 2026. Amazon Aurora PostgreSQL-Compatible Edition now supports PostgreSQL major version 18, starting with version 18.3. This release brings community improvements to query performance and database management, and introduces support for pg_roaringbitmap, a new extension that performs fast, memory-efficient set operations on large collections of integers. This enabl The reason this matters is simple: buyers are paying attention to speed, operational resilience, and credible technical execution. A trending story can create awareness, but the business question is what a team should do with that attention. ...

June 12, 2026 · 3 min · David Gomez

Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities

Today’s signal The Hacker News recently reported Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities. Published context: June 10, 2026. Fortinet, Ivanti, and SAP have released security updates to address multiple critical security vulnerabilities that could result in arbitrary code execution and information disclosure. The security flaw patched by Fortinet relates to a command injection vulnerability in FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS WEB UI. It’s tracked as CVE-2026- ...

June 11, 2026 · 3 min · David Gomez

Amazon EC2 M9g and M9gd general purpose instances are now available

Today’s signal AWS What’s New recently reported Amazon EC2 M9g and M9gd general purpose instances are now available. Published context: June 10, 2026. Starting today, Amazon Elastic Compute Cloud (Amazon EC2) M9g and M9gd instances , powered by AWS Graviton5 processors, are generally available. AWS Graviton5 processors are the fifth generation of custom-designed AWS processors, delivering the best price performance for general purpose workloads running on Amazon EC2 . ​​M9g instances serve a broad range of ...

June 11, 2026 · 3 min · David Gomez

Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild - Patch Now

Today’s signal The Hacker News recently reported Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild - Patch Now. Published context: June 9, 2026. Google has released security updates to address 74 vulnerabilities, including one that has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2026-11645 (CVSS score: 8.8), has been described as an out-of-bounds memory access in V8, Chrome’s JavaScript and WebAssembly engine. “Out-of-bounds read and write in V8 in Goog ...

June 10, 2026 · 3 min · David Gomez

AWS Bedrock to require sharing data with Anthropic for Mythos and future models

Today’s signal Hacker News recently reported AWS Bedrock to require sharing data with Anthropic for Mythos and future models. Published context: June 10, 2026. For Fable 5, Mythos 5, and future models on Bedrock with similar or higher capability levels, Anthropic will require 30-day retention for all traffic on Mythos-class models. Retaining data for a limited period allows Anthropic to detect patterns of misuse that are not visible from a single exchange. Once you opt into data retention, your data will leave AW ...

June 10, 2026 · 3 min · David Gomez

Amazon RDS for SQL Server migration cost assessment capabilities now available in AWS Transform

Today’s signal AWS What’s New recently reported Amazon RDS for SQL Server migration cost assessment capabilities now available in AWS Transform. Published context: June 8, 2026. Amazon RDS for SQL Server now offers TCO assessment in AWS Transform, so you can estimate costs when migrating on-premises SQL Server databases to RDS for SQL Server. Using AI-powered agents, AWS Transform analyzes your on-premises SQL Server environment and provides optimal database instance recommendations that meet your workload requirements and reduce co ...

June 9, 2026 · 3 min · David Gomez

Amazon EC2 M8i and M8i-flex instances are now available in Asia Pacific (New Zealand) Region

Today’s signal AWS What’s New recently reported Amazon EC2 M8i and M8i-flex instances are now available in Asia Pacific (New Zealand) Region. Published context: June 1, 2026. Starting today, Amazon EC2 M8i and M8i-flex instances are now available in Asia Pacific (New Zealand) Region. These instances are powered by custom Intel Xeon 6 processors, available only on AWS, delivering the highest performance and fastest memory bandwidth among comparable Intel processors in the cloud. The M8i and M8i-flex instances offer up to 15% bette ...

June 8, 2026 · 3 min · David Gomez