Summer 2026 SOC 1 report is now available with 185 services in scope

AWS Security Blog RSS items covering compliance and assurance reports, identity and access management, S3 permission remediation, certificate automation, encryption key management, AI coding-agent controls, software supply-chain security, vulnerability management, and DDoS protection. The most directly security-relevant threat intelligence concerns DPRK-linked compromises of npm libraries and risks in npm/PyPI package updates; other posts provide defensive guidance and AWS service announcements. No specific CVEs are identified in the supplied content.