Security researcher Paulos Yibelo discovered a critical KVM guest-to-host escape vulnerability affecting Vercel Sandbox and industry-standard hypervisors like Firecracker, earning a $50,000 bounty on October 3, 2026. Despite the severity and broad impact across VPS providers and cloud platforms, no CVE, patch, or technical details have been publicly disclosed as of October 7.
Zenity researchers discovered a critical vulnerability in AWS Bedrock AgentCore that allowed attackers to hijack all AI agents in an AWS account through a single prompt to one public agent. The flaw stemmed from improper isolation and overly broad default permissions, enabling access to credentials, source code, and private data. AWS has partially patched the issue but recommends companies implement stricter access controls.
Neon, a cloud backend platform with Postgres at its core, improved reliability across its distributed fleet spanning multiple clouds and regions. After two incidents caused by external dependency failures that cascaded through their control plane, the team implemented systematic reliability improvements including structured postmortems and detailed incident impact analysis.
Amazon announced a $1 billion investment over five years in US communities hosting its data centers, pledging to address electricity and water usage concerns. The move responds to growing opposition to data centers nationwide over environmental and utility impacts, with AWS committing to water positivity by 2030 and supporting education and job training in affected regions.
AWS announces the public preview of AWS Well-Architected Agent, an AI-powered service that analyzes AWS environments to deliver targeted recommendations for improving cost, security, performance, and resilience. The agent evaluates infrastructure like an experienced cloud architect, correlating metrics and configurations against best practices across 65+ services, and provides goal-aligned, prioritized recommendations with ready-to-implement fixes at multiple levels of scope.
A lightweight Python CLI tool that detects orphaned AWS resources like unattached EBS volumes and idle EC2 instances by analyzing billing data, helping identify infrastructure waste and cost optimization opportunities. The Lite Version runs locally on exported AWS CSVs, while an Enterprise version offers automated multi-region scanning, credential handling, and Slack integration for continuous FinOps auditing.
Amazon Web Services released Strands Decider 2B, an open-source decision model inspired by TypeSafe's Jev, designed for faster and cheaper automated decision-making in AI workflows. The model, built on Qwen3.5-2B, delivers calibrated choices rather than text generation and can run locally. Amazon distinguished engineer Marc Brooker developed the project after AWS customers expressed need for lightweight alternatives to full-featured LLMs for specific workflow steps.
Synopsys shares surged 10% after the chip-design software company forecast fiscal 2027 revenue of $11.10–11.20 billion, exceeding analyst expectations, and announced strategic deals with OpenAI and AWS. The company projects 15% annual revenue growth through 2030 and a 50% operating margin, citing strong demand for its tools driven by AI chip complexity.
Amazon Aurora PostgreSQL now supports direct querying of Apache Iceberg and Parquet data in data lakes without ETL pipelines, using embedded DuckDB technology. This capability enables applications to combine operational data with data lake records through familiar PostgreSQL syntax and tools, reducing infrastructure complexity and supporting use cases like real-time dashboards and AI agents.