Bartek Chojnacki

AWS pgcollection (PostgreSQL extension) versions 2.0.0–2.1.1 have a type confusion bug (CVE-2026-96883) that lets authenticated database users crash the backend or run arbitrary code. The vulnerability stems from improper type coercion when requesting stored icollection values as incompatible types. If you're running affected versions, update immediately to patch this important security issue.

Amazon EventBridge just relaunched its Custom event bus with enterprise-grade features like strict event ordering, 24-hour built-in retention (extendable to a year), and support for popular JSON formats like CloudEvents. The new bus is available across 14 regions including US, Europe, and Asia Pacific, and you can now share it across AWS accounts and deliver events to 250+ AWS services with automatic deduplication.

Amazon just dropped SageMaker HyperPod Inference Gateway, a Kubernetes-native routing system that replaces dumb round-robin load balancing with real-time inference signals—think KV cache utilization and queue depth. It's available now for per-cluster routing across all AWS regions where HyperPod inference is supported, with cross-cluster and cross-region magic coming soon.

AWS just dropped CloudWatch Omni in general availability, bringing AI-first observability that lets you monitor applications and agents across AWS, Azure, and other clouds from a single pane of glass. You can query telemetry in natural language, get automatic service discovery and dependency mapping, plus a dedicated agent evaluation workflow for LangGraph, CrewAI, and other frameworks—available now in US East (N. Virginia), US West (Oregon), and Europe (Ireland).

Amazon DynamoDB's multi-Region strong consistency feature just expanded to 15 AWS Regions, including new locations in Canada, Stockholm, Spain, Mumbai, and Singapore. You can now build zero-RPO applications across North America, Europe, and Asia Pacific with three-Region configurations, keeping your data strongly consistent while staying close to your users.

AWS just dropped native connectors for Amazon Bedrock Managed Knowledge Base that let you sync Salesforce articles and Zendesk help center content automatically—no more building custom pipelines. Your RAG apps stay fresh with real-time data, so you can spin up support bots and sales assistants that actually know what they're talking about.

s2n-quic versions 1.88.0 and earlier have a vulnerability allowing unauthenticated attackers to crash server endpoints via a single crafted UDP packet. Only servers configured to send Retry packets are affected. AWS services aren't impacted, so AWS customers need no action. If you're running s2n-quic with Retry packets enabled, upgrade to the patched version immediately.

AmazonConnectSalesforceLambda versions 5.15–5.24.16 have a critical authorization flaw (CVE-2026-94384) in the sfExecuteAWSService function. An attacker with lambda:InvokeFunction permission can bypass IAM checks and execute privileged AWS operations they shouldn't access. If you're running affected versions, update immediately—this one's a real privilege escalation nightmare.

AWS just dropped GPT-6 Sol and GPT-6 Luna on Amazon Bedrock, giving you two fresh models to pick from depending on your needs. Sol handles complex coding and multistep workflows with half the error rate of GPT-5.6, while Luna crushes high-volume tasks like summarization and classification—both support a massive 1M token context window.