Wednesday, 28 October 2026

DevOps & Cloud News: 28 Oct 2026

CISA added Adobe Commerce/Magento (CVE-2026-48356) and Google Brotli (CVE-2026-111497) to KEV on 27 Oct. Amazon Corretto shipped a patch update on 26 Oct on top of the quarterly one, and AWS added ECS GPU sharing and in-place durability changes for ElastiCache Valkey. GitHub announced Copilot security and enterprise changes.

Cybersecurity

CISA KEV

CISA adds Google Brotli (CVE-2026-111497) and Adobe Commerce/Magento (CVE-2026-48356) to KEV

Both were added on 27 Oct with a due date of 10 Nov. Brotli has an unchecked return value flaw that lets a remote unauthenticated attacker corrupt adjacent decoder state memory, disclose memory contents, cause denial of service or potentially more. Adobe Commerce and Magento have an unrestricted upload of a dangerous file type that can lead to arbitrary code execution. Brotli is embedded in many libraries, browsers and web servers, so check your Nginx/Apache modules and base images, and patch Magento.

AWS

AWS What's New

Amazon Corretto October 2026 patch update

On 26 Oct Amazon released a patch update after the quarterly one of 22 Oct: Corretto 27.0.1.0.11, 25.0.5.0.10, 21.0.13.0.11, 17.0.21.0.11, 11.0.33.0.10 and 8u512. If you pinned the 22 Oct build numbers, bump them. Packages are available from the Corretto apt, yum and apk repos.

AWS What's New

Amazon ECS supports GPU sharing with NVIDIA MPS

Multiple ECS tasks can now run on a single NVIDIA GPU. You define the GPU memory each container needs and can optionally set a maximum share of GPU compute, with no application code change. Aimed at small-model inference, embedding generation and multi-model serving.

DevOps

AWS What's New

ElastiCache for Valkey: change durability on existing clusters

Durability can be enabled or disabled on existing node-based clusters without creating a new one. Options are synchronous writes, which persist across at least two AZs before responding to the client, or asynchronous writes. Handy when a cache starts holding data you cannot lose.

AI & Security

GitHub Changelog

Security extension for the GitHub Copilot app (public preview)

You can work through your repository's code scanning alerts without leaving the Copilot app. It is in public preview. Separately, GitHub Enterprise customers working with a GitHub or Microsoft account team can now get Copilot included for every licensed user.

← All daily news