generative AI – Noise

AWS Security Agent (now part of AWS Continuum) exploited 33 of 37 new real-world CVEs

Dazhi Zhang — Thu, 15 Oct 2026 16:10:14 +0000

We applied AWS Security Agent (now part of AWS Continuum), our autonomous penetration-testing agent, to 37 real, recently disclosed Common Vulnerabilities and Exposures (CVEs), each packaged as a live, containerized target with a flag hidden at the vulnerability’s intended sink. Starting from an unauthenticated or low-privilege position (an endpoint URL and a one-line hint, no […]

Penetration testing every deployment with AWS Continuum

Jigar Bhatt — Wed, 14 Oct 2026 20:21:52 +0000

Most security tooling that fits into a CI/CD pipeline—static analysis (SAST), software composition analysis (SCA), and dynamic scanners (DAST)—flags potential issues from patterns and signatures. A flagged pattern shows you where to look; penetration testing is what confirms whether something is actually exploitable. That confirmation has traditionally come from a periodic, out-of-band engagement that runs […]

Configuring your AI vulnerability harness, Part 2: The steering file

Justin Kontny — Wed, 07 Oct 2026 21:49:50 +0000

This post shows you how to configure an AI model to perform structured, evidence-based vulnerability triage with the consistency of a seasoned security analyst. You’ll learn the design decisions behind five configuration sections that enforce structural verification, evidence-based scoring, and infrastructure-aware prioritization across every analysis session. Our companion post—Building your AI vulnerability harness—covered the architecture; […]

Building your AI vulnerability harness, Part 1

Nidhi Ramakant — Wed, 07 Oct 2026 21:49:43 +0000

Vulnerability scanners produce findings faster than manual triage can process them. Your developers ship more code with more dependencies, and the volume of candidate findings grows with it. Many findings a scanner produces are unlikely to be exploited. The ones that matter need to reach an engineer fast, with enough evidence that they can act […]

Announcing AWS Well-Architected Agent, an AI-powered intelligence to optimize your cloud environment (preview)

Channy Yun (윤석찬) — Thu, 01 Oct 2026 20:04:04 +0000

Introducing the public preview of AWS Well-Architected Agent, an AI-powered service that analyzes your AWS environment to deliver targeted, contextual recommendations for improving your applications' cost, security, performance, and resilience—with ready-to-implement fixes aligned to your business goals.

Run open weight models on AWS Bedrock in AWS European Sovereign Cloud

Marta Taggart — Thu, 17 Sep 2026 21:19:20 +0000

European organizations can run AI workloads on Amazon Web Services (AWS) while keeping data within the European Union (EU) and meeting regulatory requirements. You can now run generative AI workloads on open weight models on Amazon Bedrock in the AWS European Sovereign Cloud. We’re excited to announce the general availability of the first open weight […]

The state of AI for security: Measuring what matters most for building trust

Anshumali Shrivastava — Wed, 09 Sep 2026 19:09:14 +0000

Security teams are starting to actively use AI for security work, including vulnerability triage, penetration testing, threat modeling, incident response, and code review. The promise is speed, but a security tool that moves fast and raises too many false alarms doesn’t save time. Engineers spend time on false alarms, on-call is noisier, and teams distrust […]

Build your own continuous modernization pipeline with AWS Transform custom

Janardhan Molumuri — Fri, 28 Aug 2026 13:27:12 +0000

Introduction Development velocity has reached new heights with AI-driven development tools and practices. Organizations are generating code faster than ever before. But that speed carries risk. Researchers Anderson, Parker, and Tan warned in MIT Sloan Management Review, “Legacy systems tend to carry hidden debt; layering AI-generated code on top of them creates additional tangled dependencies.” […]

Extend Amazon Bedrock Guardrails to Tool Interactions Using the Strands Agents SDK

Stephan Traub — Thu, 27 Aug 2026 16:20:05 +0000

If you’re running AI agents in production, Amazon Bedrock Guardrails protects the model boundary. But your agents also invoke tools, fetch external data, and communicate with other systems. That data flows outside the model boundary, where model-level guardrails can’t reach. You can extend guardrail coverage to those interactions using three validation checkpoints built with the […]

Scaling Autonomous Operations with AWS DevOps Agent and ServiceNow

Jack Hwang — Thu, 06 Aug 2026 19:55:26 +0000

This post is co-written with Govind Menon, Head of MCP Product at ServiceNow. Introduction Enterprise teams managing applications on AWS often rely on ServiceNow as their IT service management (ITSM) system for incident tracking, change management, and configuration management. When incidents occur, engineers must context-switch between AWS, third party observability tools and ServiceNow, manually correlating […]

AWS partners with Anthropic and OpenAI to bring AWS Continuum into developer workflows

Chet Kapoor — Wed, 05 Aug 2026 21:00:11 +0000

Customers have access to models that are continuously getting better with each new generation bringing larger context windows, stronger reasoning, and lower token costs. Getting the strongest AI-powered security will come from tools that combine the most relevant models with deep knowledge of a customer’s specific environment. AWS Continuum for code vulnerabilities (Preview) is built […]

Amazon DynamoDB now supports real-time vector search at any scale

Esra Kayabali — Wed, 05 Aug 2026 14:45:10 +0000

DynamoDB now supports native vector search with single-digit millisecond latency at 99%+ recall. It is designed for any scale, even trillions of vectors and requires zero infrastructure management.

Balancing speed and safety: A control framework for AI coding agents

Daniel Begimher — Thu, 30 Jul 2026 21:49:15 +0000

AI coding agents are part of the developer toolchain. Tools like Kiro and Claude Code generate features, tests, and code refactors from natural-language prompts. A single agent can open dozens of pull requests (PRs) across your repositories in an afternoon. That productivity comes with a trade-off: agents optimize for task completion at machine speed with […]

Amazon identifies North Korean hacker group behind open-source supply chain attacks

CJ Moses — Wed, 29 Jul 2026 21:00:12 +0000

Amazon is sharing new findings about how a threat actor linked to the Democratic People’s Republic of Korea (DPRK) is targeting open source software libraries, the shared building blocks that companies around the world use to develop applications. Amazon Threat Intelligence has linked several recent compromises of popular Node Package Manager (NPM) libraries to the […]

Agent platform (Part 1): How we help Grab build and run AI agents at scale

Grab Tech — Fri, 24 Jul 2026 00:00:10 +0000

Part 1: From one support bot to a framework At Grab, AI agents have evolved from interesting team prototypes into production services used every day by millions of merchants, drivers, and consumers. Today, more than 500 services run on our internal ag...

How MAPFRE USA modernized fraud claims with Amazon EMR Serverless

Lijan Kuniyil — Mon, 13 Jul 2026 09:26:59 +0000

Insurance fraud remains a significant challenge for the insurance industry. Fraudulent claims can increase loss costs, reduce trust, and consume investigation capacity that could otherwise be focused on serving customers. Traditional fraud detection approaches typically rely on rules-based controls, manual investigation triggers, historical claim patterns, and structured-data-only analysis. These approaches are useful for known fraud […]

Automating cross-repo documentation with GitHub Agentic Workflows

David Pine — Wed, 08 Jul 2026 21:11:56 +0000

Explore how the Aspire team turns merged product changes into SME-reviewed docs pull requests, closing the gap between release and documentation.

The post Automating cross-repo documentation with GitHub Agentic Workflows appeared first on The GitHub Blog.

Designing for the inevitable: System prompt leakage and mitigations in generative AI applications

Manideep Konakandla — Wed, 08 Jul 2026 18:58:42 +0000

System prompts form the foundation of generative AI applications. A system prompt is a collection of instructions and operational context provided to a large language model (LLM) that shapes how the model behaves and interacts with users and tools. System prompts often contain proprietary information, including role definitions, behavioral guidelines, tool descriptions and usage instructions, […]

Building and running custom code transformations without leaving your editor

David Hasani — Mon, 22 Jun 2026 22:37:08 +0000

Custom code transformations are the work that no off-the-shelf migrator covers for you. Moving your services off an internal library, enforcing your team’s error-handling conventions, standardizing logging across your fleet of services: that work piles up on your backlog because general-purpose tools weren’t written with your codebase in mind. AWS Transform custom tackles that kind […]

Introducing Amazon Bedrock Managed Knowledge Base for faster, more accurate enterprise AI applications

Daniel Abib — Wed, 17 Jun 2026 15:09:20 +0000

Amazon Bedrock's new Fully Managed Knowledge Bases simplifies building enterprise RAG pipelines by providing native data connectors Smart Parsing for automatic multi-format data preparation, and an Agentic Retriever for complex multi-step queries—all integrated with AgentCore Gateway so developers can focus on business outcomes rather than infrastructure management.