Bartek Chojnacki

Amazon Strands Agents Tools versions before 0.8.5 contain CVE-2026-78379, a consent bypass flaw in the python_repl tool that lets attackers execute arbitrary Python code on your host by sneaking non_interactive_mode through the batch tool. The vulnerability bypasses the human approval gate that normally protects code execution. Action required: upgrade to version 0.8.5 or later immediately if you're running affected versions.

AWS just dropped EC2 R8id instances in seven new regions across Asia Pacific, Canada, and Europe, so you can now spin up serious memory-crunching workloads closer to home. These beasts pack 22.8TB of NVMe SSD storage and 43% better performance than R6id, plus you can now fine-tune network and EBS bandwidth allocation by 25% for smarter resource optimization.

Amazon EC2 C8id and M8id instances are now live in Sydney, Mumbai, and Canada Central, bringing serious compute power with up to 22.8 TB of local NVMe SSD storage. These beasts deliver 3x more vCPUs and memory than previous gen, plus 43% better compute performance—perfect for heavy lifting like video encoding, data analytics, and I/O-intensive workloads.

Amazon SageMaker HyperPod now makes running Ray clusters way smoother with interactive development environments, automatic job recovery, and Grafana dashboards—no more kubectl wrestling matches. You can iterate on cluster-scale compute directly from JupyterLab or your local IDE, while HyperPod handles GPU faults and hung jobs automatically, plus accelerates Ray Serve inference with tiered KV caching.

SageMaker MLflow now lets you encrypt your ML data with your own AWS KMS keys, giving you full control over encryption and audit trails through CloudTrail. This feature rolls out across all AWS Regions where MLflow App is available, perfect for teams juggling strict compliance requirements.

AWS Glue 6.0 is here with a 30% price cut, Apache Spark 4.1 optimization, and Apache Iceberg V3 support—making enterprise data integration faster and cheaper. The article walks you through key capabilities and performance gains with practical code examples to get your pipelines running.

OpenSearch Dashboards has a stored XSS flaw (CVE-2026-77811) in the dashboards-observability plugin that lets authenticated users inject malicious scripts. If you're running self-managed versions before 3.4 or 2.19.6, update immediately—AWS managed users are already patched. An attacker with write access can execute JavaScript in other users' browsers and hijack their API calls.

Amazon Athena's Neptune connector (versions ≤v2026.28.1 and ≥v2024.15.1) has a security flaw that could let users access Lambda compute properties. If you're running Athena Federated Query with Neptune, update immediately to patch CVE-2026-77810. This is a serious issue requiring your attention.

AWS Glue 6.0 is here with a modernized runtime featuring Apache Spark 4.1, Python 3.12, and Scala 2.13—plus full Apache Iceberg v3 support. Data engineers get 30% lower costs compared to previous versions, making ETL pipelines more efficient and budget-friendly.