Launch of AWS Continuum for Vulnerability Management
AWS has unveiled AWS Continuum, a new vulnerability management tool aimed at changing the traditional concept of security scanning. The service builds a context graph that links code repositories to the AWS environment, allowing for the reproduction of exploitable vulnerabilities in an isolated sandbox environment while providing proof-of-concept code. The service prioritizes based on how close an attack path is to sensitive systems and provides ready-made fixes via pull requests that require human approval in their current phase.
Why does this change in cybersecurity matter?
AWS based its launch on data from its own honeypots, which showed that the time gap between vulnerability disclosure and exploitation has almost vanished. In a recent case, exploitation attempts were detected 12 hours before the official disclosure of vulnerabilities (CVE-2026-109618 and CVE-2026-109619). This means that relying on traditional patching windows measured in days has become insufficient, making tools like Continuum essential for rapid response.
New Amazon ECS Gateway Service
AWS has introduced the Amazon ECS Gateway service, which aims to separate network management tasks from application management tasks. This service allows platform teams to define a central gateway that includes network settings, TLS certificates, and WAF, while application teams can join it easily. The service supports up to 25 services per Application Load Balancer (ALB) and allows for gradual adoption without the need to change existing infrastructure.
AI and Chip Updates
- Amazon Polly: The generative engine received a major upgrade including 14 new voices, bringing the total to 57 voices across 11 languages, including Brazilian Portuguese.
- TorchNeuron: AWS launched a public beta of TorchNeuron, an open-source library that allows running PyTorch models on Trainium chips via a simple configuration change without the need to rewrite code.
- Amazon Bedrock: Claude models can now provide outputs in schema-compliant JSON format, facilitating the automation of complex tasks such as analyzing financial reports and medical notes.
- Amazon ElastiCache: The service now supports online migration for Valkey and Redis OSS databases from EC2 to ElastiCache Serverless without any downtime.