Security teams need powerful tools to find vulnerabilities, test exploits, and build defenses. Daybreak Red from OpenAI is now available to eligible customers on Amazon Bedrock in AWS GovCloud (US-East), bringing advanced AI to this work.
Part of OpenAI’s Daybreak cyber defense initiative, Daybreak Red: GPT-5.6 Cyber is built for authorized vulnerability research, exploit reproduction, and mitigation development. It gives verified defenders more room to investigate complex security problems, with fewer refusals for this work and stronger identity verification, monitoring, and access controls.
Daybreak Red runs on Bedrock’s next-generation inference engine, with zero-operator access enforced at the chip. Your inference data is not used to train models, and you do not need to share your Daybreak Red data with OpenAI.
The model is available in US East (Ohio) and AWS GovCloud (US-East). Access to the model requires enrollment in Daybreak access from OpenAI. To get started, contact OpenAI or your AWS account team about Daybreak eligibility. Once approved, work with your AWS account team to enable access. Learn more in the blog.
Security teams need powerful tools to find vulnerabilities, test exploits, and build defenses. Daybreak Red from OpenAI is now available to eligible customers on Amazon Bedrock in AWS GovCloud (US-East), bringing advanced AI to this work.
Part of OpenAI’s Daybreak cyber defense initiative, Daybreak Red: GPT-5.6 Cyber is built for authorized vulnerability research, exploit reproduction, and mitigation development. It gives verified defenders more room to investigate complex security problems, with fewer refusals for this work and stronger identity verification, monitoring, and access controls.
Daybreak Red runs on Bedrock’s next-generation inference engine, with zero-operator access enforced at the chip. Your inference data is not used to train models, and you do not need to share your Daybreak Red data with OpenAI.
The model is available in US East (Ohio) and AWS GovCloud (US-East). Access to the model requires enrollment in Daybreak access from OpenAI. To get started, contact OpenAI or your AWS account team about Daybreak eligibility. Once approved, work with your AWS account team to enable access. Learn more in the blog.
Amazon Relational Database Service (Amazon RDS) for Oracle now lets you turn off automatic minor version upgrades on new and existing DB instances that use the JVM, Spatial, Locator, or OLAP option. Previously, these options required automatic minor version upgrades to be enabled.
With this change, you decide when to apply minor version upgrades to DB instances using these options. If you turn off automatic minor version upgrades, we recommend that you apply new minor versions regularly so your DB instances keep the latest Oracle security fixes. To keep automatic minor version upgrades turned on and still control the order in which your environments are upgraded, you can use AWS Organizations upgrade rollout policy.
Amazon Relational Database Service (Amazon RDS) for Oracle now lets you turn off automatic minor version upgrades on new and existing DB instances that use the JVM, Spatial, Locator, or OLAP option. Previously, these options required automatic minor version upgrades to be enabled.
With this change, you decide when to apply minor version upgrades to DB instances using these options. If you turn off automatic minor version upgrades, we recommend that you apply new minor versions regularly so your DB instances keep the latest Oracle security fixes. To keep automatic minor version upgrades turned on and still control the order in which your environments are upgraded, you can use AWS Organizations upgrade rollout policy.
This change is available in all commercial AWS Regions and the AWS GovCloud (US) Regions where Amazon RDS for Oracle is available. To learn more about options available in Amazon RDS for Oracle, see Adding options to Oracle DB instances in the Amazon RDS User Guide.
AWS WAF announces automatic SDK integration for Amazon CloudFront distributions. When you enable it, CloudFront adds the script tag for the AWS WAF JavaScript SDK to the HTML it serves, with no change to your application code, build process, or deployment. The SDK supplies the client-side signals used by three AWS WAF managed rule groups: Bot Control at the targeted inspection level, Fraud Control account takeover prevention (ATP), and Fraud Control account creation fraud prevention (ACFP).
Previously, supplying those signals required you to add a script tag to every page of every application you wanted to protect, and to maintain that tag across releases. For teams running many applications, or serving pages produced by systems they do not control, this created recurring work and a common source of misconfiguration, where a protection was enabled in AWS WAF but the client-side integration was missing. Enabling automatic SDK integration on the web ACL protecting your CloudFront distribution removes that per-application work.
Automatic SDK integration is available for web ACLs that are used with Amazon CloudFront and contain at least one of those managed rule groups. You can configure it using the AWS Management Console, CLI, SDK, CDK, or CloudFormation. In the AWS WAF console, the setting appears with the managed rule group settings and is on by default for new web ACLs that you create with one of those rule group. When you create a web ACL programmatically, the setting is off by default. Web ACLs created before this release are unchanged.
There is no additional charge for automatic SDK integration. For requirements, limitations, and Content Security Policy guidance, see Automatic SDK integration for CloudFront distributions in the AWS WAF Developer Guide.
AWS WAF announces automatic SDK integration for Amazon CloudFront distributions. When you enable it, CloudFront adds the script tag for the AWS WAF JavaScript SDK to the HTML it serves, with no change to your application code, build process, or deployment. The SDK supplies the client-side signals used by three AWS WAF managed rule groups: Bot Control at the targeted inspection level, Fraud Control account takeover prevention (ATP), and Fraud Control account creation fraud prevention (ACFP). Previously, supplying those signals required you to add a script tag to every page of every application you wanted to protect, and to maintain that tag across releases. For teams running many applications, or serving pages produced by systems they do not control, this created recurring work and a common source of misconfiguration, where a protection was enabled in AWS WAF but the client-side integration was missing. Enabling automatic SDK integration on the web ACL protecting your CloudFront distribution removes that per-application work. Automatic SDK integration is available for web ACLs that are used with Amazon CloudFront and contain at least one of those managed rule groups. You can configure it using the AWS Management Console, CLI, SDK, CDK, or CloudFormation. In the AWS WAF console, the setting appears with the managed rule group settings and is on by default for new web ACLs that you create with one of those rule group. When you create a web ACL programmatically, the setting is off by default. Web ACLs created before this release are unchanged. There is no additional charge for automatic SDK integration. For requirements, limitations, and Content Security Policy guidance, see Automatic SDK integration for CloudFront distributions in the AWS WAF Developer Guide.
AWS Glue Data Catalog now supports automatic table optimization for Apache Iceberg tables in the US West (N. California) Region. Apache Iceberg is an open table format that delivers fast query performance over large tables in data lakes. With this launch, you can enable table optimization for individual tables or for all tables in your Data Catalog.
Apache Iceberg tables accumulate small files, snapshots, and unreferenced files with every write, which slows queries and increases storage costs over time. Table optimization continuously monitors your tables to compact small files in the background, remove snapshots that are past your retention settings, and delete unreferenced files that are no longer needed. You can monitor each run from the AWS Glue console, Amazon CloudWatch metrics, and logs.
You can enable table optimization using the AWS Glue console, AWS CLI, or AWS SDKs. For the full list of Regions where table optimization is available, see Supported Regions for table optimizers. To learn more, see Optimizing Iceberg tables in the AWS Glue Developer Guide. To get started, visit the AWS Glue product page.
AWS Glue Data Catalog now supports automatic table optimization for Apache Iceberg tables in the US West (N. California) Region. Apache Iceberg is an open table format that delivers fast query performance over large tables in data lakes. With this launch, you can enable table optimization for individual tables or for all tables in your Data Catalog.
Apache Iceberg tables accumulate small files, snapshots, and unreferenced files with every write, which slows queries and increases storage costs over time. Table optimization continuously monitors your tables to compact small files in the background, remove snapshots that are past your retention settings, and delete unreferenced files that are no longer needed. You can monitor each run from the AWS Glue console, Amazon CloudWatch metrics, and logs.
You can enable table optimization using the AWS Glue console, AWS CLI, or AWS SDKs. For the full list of Regions where table optimization is available, see Supported Regions for table optimizers. To learn more, see Optimizing Iceberg tables in the AWS Glue Developer Guide. To get started, visit the AWS Glue product page.
Volver a la Esencia: recuperar el lado humano del trabajo
La inteligencia artificial (IA) redefine la manera en que trabajamos, colaboramos y tomamos decisiones. En medio de esta transformación, la serie Volver a la Esencia reúne las reflexiones de líderes de distintos sectores sobre un desafío común: aprovechar el potencial de la IA sin perder de vista aquello que da sentido a nuestro trabajo. Porque, más allá de la tecnología, el futuro de las profesiones dependerá todavía de las personas, de su criterio y de su responsabilidad para organizar el trabajo.
Personas primero, tecnología después
En esta primera entrega, Daniela Mora Simoes, directora de personas de Grupo OMINT, una de las principales compañías de salud y seguros médicos de Argentina, nos invita a volver a una idea fundamental: poner a las personas en el centro de la transformación. Frente al avance de la IA, su reflexión no se enfoca en qué pueden hacer las herramientas, sino en cómo pueden ayudar a que las personas desarrollen una mejor versión de sí mismas.
Para Daniela, que también dirige en Argentina la Organización Internacional de Directivos de Capital Humano (DCH Argentina), la IA debe entenderse como una inteligencia aumentada, una capacidad que potencia el trabajo y libera espacio para que los profesionales se concentren en aquello que en verdad genera valor. La tecnología puede acelerar procesos y ampliar posibilidades, pero el criterio, el liderazgo y las decisiones que moldean el futuro del trabajo se mantienen en manos de las personas.
Esa es, justo, la esencia a la que propone regresar. En un entorno de transformación permanente, habilidades como la empatía, la escucha activa, la resiliencia, la flexibilidad y el pensamiento crítico adquieren una relevancia cada vez mayor. Son estas capacidades las que permiten acompañar a otros, generar confianza y asegurar que el cambio tecnológico esté al servicio de las personas y no al revés.
«La inteligencia artificial, en realidad, lo que genera es una inteligencia aumentada para poder dar una mejor versión en aquellas cosas que las personas agregan valor.»
Today, AWS announces that AWS partners who operate multiple legal entities can publish a product listing once in their primary account and enable their local subsidiaries to sell it through direct private offers — eliminating the need to recreate and maintain duplicate listings across every account.
From the primary account, which retains ownership of the listing, partners authorize which products each subsidiary can sell and which buyer countries it can extend private offers to. Each subsidiary transacts under its own local tax identity, selects the local currencies it supports, and sets its own disbursement preferences and bank account. The AWS Marketplace insights report in the primary account provides a consolidated view of offers, agreements, and renewals across all connected subsidiary accounts. Partners can revoke a subsidiary authorization or a subsidiary connection at any time, which immediately stops that subsidiary from creating new offers — agreements and offers already extended to buyers remain unchanged.
Today, AWS announces that AWS partners who operate multiple legal entities can publish a product listing once in their primary account and enable their local subsidiaries to sell it through direct private offers — eliminating the need to recreate and maintain duplicate listings across every account.
From the primary account, which retains ownership of the listing, partners authorize which products each subsidiary can sell and which buyer countries it can extend private offers to. Each subsidiary transacts under its own local tax identity, selects the local currencies it supports, and sets its own disbursement preferences and bank account. The AWS Marketplace insights report in the primary account provides a consolidated view of offers, agreements, and renewals across all connected subsidiary accounts. Partners can revoke a subsidiary authorization or a subsidiary connection at any time, which immediately stops that subsidiary from creating new offers — agreements and offers already extended to buyers remain unchanged.
This capability is available today at no additional cost in all AWS Regions where AWS Marketplace is available. To get started, see Managing subsidiary account connections and Creating private offers as a subsidiary account .
Amazon MSK Connect (Amazon Managed Streaming for Apache Kafka Connect) now lets you update the custom plugin and worker configuration of an existing connector. This is useful when you need to update the custom plugin to run a new version of your connector code, for example one with updated dependencies. You can also update the worker configuration to change worker-level settings, such as switching key and value converters or tuning producer and consumer properties for throughput and latency.
Amazon MSK Connect is a fully managed service that allows you to deploy, monitor, and scale Apache Kafka Connect connectors with Amazon MSK (Managed Streaming for Apache Kafka). Previously, updating a connector’s plugin or worker configuration meant deleting the connector and recreating it – a disruptive operation that added risk and operational overhead. With this launch, you can update a connector’s plugin and worker configuration in place. The connector keeps its committed offsets, so its tasks continue processing from where they left off once the update completes.
This capability is available at no additional cost in all AWS Regions where Amazon MSK Connect is supported. To learn more, visit Amazon MSK Connect developer guide.
Amazon MSK Connect (Amazon Managed Streaming for Apache Kafka Connect) now lets you update the custom plugin and worker configuration of an existing connector. This is useful when you need to update the custom plugin to run a new version of your connector code, for example one with updated dependencies. You can also update the worker configuration to change worker-level settings, such as switching key and value converters or tuning producer and consumer properties for throughput and latency.
Amazon MSK Connect is a fully managed service that allows you to deploy, monitor, and scale Apache Kafka Connect connectors with Amazon MSK (Managed Streaming for Apache Kafka). Previously, updating a connector’s plugin or worker configuration meant deleting the connector and recreating it – a disruptive operation that added risk and operational overhead. With this launch, you can update a connector’s plugin and worker configuration in place. The connector keeps its committed offsets, so its tasks continue processing from where they left off once the update completes.
This capability is available at no additional cost in all AWS Regions where Amazon MSK Connect is supported. To learn more, visit Amazon MSK Connect developer guide.
Starting today, Amazon Aurora PostgreSQL-Compatible Edition introduces support for post-quantum TLS (PQ-TLS) key exchange, providing you with post-quantum cryptography options for encrypting your data in transit.
Amazon Aurora PostgreSQL versions 18 and higher support modification of the ssl_groups parameter. You can select cryptographic groups from the Amazon Aurora PostgreSQL allow list to align with your organization’s security standards.
Amazon Aurora is designed for high performance and availability at global scale with full PostgreSQL compatibility. It provides scale-to-zero serverless compute, Aurora Global Database for multi-Region resilience, Aurora I/O-Optimized for improved price performance on I/O-intensive workloads, and built-in security and continuous backups. To get started, take a look at our getting started page.
Starting today, Amazon Aurora PostgreSQL-Compatible Edition introduces support for post-quantum TLS (PQ-TLS) key exchange, providing you with post-quantum cryptography options for encrypting your data in transit.
Amazon Aurora PostgreSQL versions 18 and higher support modification of the ssl_groups parameter. You can select cryptographic groups from the Amazon Aurora PostgreSQL allow list to align with your organization’s security standards.
Amazon Aurora is designed for high performance and availability at global scale with full PostgreSQL compatibility. It provides scale-to-zero serverless compute, Aurora Global Database for multi-Region resilience, Aurora I/O-Optimized for improved price performance on I/O-intensive workloads, and built-in security and continuous backups. To get started, take a look at our getting started page.
AWS Backup now supports cross-account management, cross-account backup, and delegated administrators in the AWS European Sovereign Cloud (Germany) Region. These capabilities help you centrally manage, monitor, and copy backups across the accounts in your organization using AWS Organizations.
With cross-account management, you can deploy organization-wide backup policies from your AWS Organizations management account or a delegated administrator account. You can also monitor backup, copy, and restore jobs across all of your organization accounts from one place. With cross-account backup, you can copy recovery points to a backup vault in another account in your organization, which adds protection against accidental or malicious deletion in the source account. You can also register a member account as a delegated administrator, so your teams can manage backups across your organization without needing access to your management account.
AWS Backup now supports cross-account management, cross-account backup, and delegated administrators in the AWS European Sovereign Cloud (Germany) Region. These capabilities help you centrally manage, monitor, and copy backups across the accounts in your organization using AWS Organizations.
With cross-account management, you can deploy organization-wide backup policies from your AWS Organizations management account or a delegated administrator account. You can also monitor backup, copy, and restore jobs across all of your organization accounts from one place. With cross-account backup, you can copy recovery points to a backup vault in another account in your organization, which adds protection against accidental or malicious deletion in the source account. You can also register a member account as a delegated administrator, so your teams can manage backups across your organization without needing access to your management account.
There is no additional charge to use these capabilities; standard AWS Backup pricing applies. To learn more, see the AWS Backup documentation at https://docs.aws.amazon.com/aws-backup/. To get started, visit the AWS Backup console at https://console.aws.amazon.com/backup.
Microsoft y CENIA le dan motor a Latam GPT, el primer gran modelo de lenguaje abierto de América Latina
La alianza contempla una inversión de US$250.000 en créditos de Azure hasta febrero de 2027 para la infraestructura y operación de Latam GPT, además de investigación conjunta y el acompañamiento técnico del AI for Good Lab de Microsoft.
El objetivo es que la inteligencia artificial funcione en los idiomas y contextos que la región realmente habla, en un escenario en el que la adopción de IA crece en América Latina pero la brecha con el Norte Global sigue abierta.
Santiago de Chile – Microsoft y el Centro Nacional de Inteligencia Artificial (CENIA) de Chile anunciaron una alianza para impulsar el desarrollo de Latam GPT, el primer gran modelo de lenguaje abierto creado en y para América Latina y el Caribe. El memorando de entendimiento fue firmado por Juan Lavista Ferres, vicepresidente corporativo y científico de datos en jefe de Microsoft, y Álvaro Soto, director ejecutivo de CENIA, y establece un marco de cooperación por dos años para apoyar el modelo fundacional de la región.
En la primera fase del acuerdo, Microsoft aportará US$250.000 en créditos de Azure destinados a la infraestructura de cómputo y a las necesidades operativas de la plataforma. Hoy, esa capacidad en la nube es la que sostiene el funcionamiento de Latam GPT. A ello se suma la contribución científica del AI for Good Lab de Microsoft, que brindará orientación directa en el desarrollo del plan técnico de CENIA y participará en proyectos de investigación conjunta con la red de universidades y centros de investigación de CENIA, enfocados en soluciones de IA para América Latina. Además, ambas organizaciones desarrollarán casos de estudio conjuntos en educación, servicios públicos y salud que demuestren el impacto de la alianza.
Por qué importa: una IA que hable como la región
Latam GPT es una iniciativa colaborativa regional de América Latina y el Caribe, liderada por CENIA en Chile, que busca desarrollar un modelo de lenguaje entrenado con datos, lenguas, culturas y realidades latinoamericanas. Presentado en febrero de 2026, el modelo se construyó con más de 300 mil millones de tokens en español y portugués y la participación de unas 60 instituciones de 15 países. Sus impulsores lo plantean como respuesta a una brecha estructural: el español y el portugués representan cerca del 4% y el 2%, respectivamente, de los datos con los que se entrenan los grandes modelos de IA.
Ambas organizaciones comparten el interés en apoyar la diversidad lingüística, el desarrollo de más modelos multilingües en la región, la innovación inclusiva con foco en lenguas de bajos recursos y el cierre de brechas digitales. Para Microsoft, la alianza extiende a América del Sur el trabajo que ya realiza con organizaciones de Europa, África y Asia Pacífico para desarrollar IA en más idiomas y fortalecer los modelos lingüísticos locales, con un alcance potencial de más de 600 millones de hispanohablantes.
“El desafío para América Latina no es simplemente adoptar la inteligencia artificial, sino participar en su construcción. Un modelo abierto significa que las instituciones de toda América Latina pueden construir sobre Latam GPT, y no solo usarlo. Eso es lo que lo convierte en infraestructura regional y no en un producto, y es la razón por la que se sumaron cerca de 60 instituciones. Esta alianza fortalece las dos cosas de las que depende esa infraestructura: el desarrollo de capacidades técnicas y la colaboración regional”, afirmó Álvaro Soto, profesor de la Universidad Católica y director de CENIA.
«Nuestro último AI Diffusion Report muestra que casi una de cada cinco personas en edad de trabajar ya usa inteligencia artificial, pero la brecha entre el Norte y el Sur Global sigue creciendo. Para reducirla, la IA tiene que funcionar en los idiomas que la gente realmente habla y reflejar su cultura. Por eso apoyamos a CENIA y a Latam GPT: si la IA no llega a todos, sus beneficios tampoco», afirmó Juan Lavista Ferres, vicepresidente corporativo y científico de datos en jefe de Microsoft, y director del AI for Good Lab de Microsoft.
La adopción de IA crece, pero la brecha persiste
Según el más reciente Global AI Diffusion Report de Microsoft, correspondiente al segundo trimestre de 2026, el uso de IA alcanzó en junio al 18,8% de la población mundial en edad laboral, alrededor de un punto más que en el primer trimestre. Sin embargo, la distancia entre regiones se sigue ampliando: el uso llega al 28,8% en el Norte Global y al 16,2% en el Sur Global.
América Latina muestra un dinamismo relevante dentro de ese escenario. Costa Rica lidera la región con un 29,7% de adopción, seguida por Colombia (25,9%), República Dominicana (25,8%) y Uruguay (25,7%). Chile alcanza el 24,0% y Argentina el 23,4%, mientras que México registra 21,4%, Brasil 20,2% y Perú 17,3%.
El informe también identifica dos señales directamente vinculadas a iniciativas como Latam GPT. Por un lado, en el Sur Global la IA se usa en mayor proporción para educación y aprendizaje. Por otro, el avance de los modelos como Latam GPT podría beneficiar especialmente a estas economías al reducir los costos de acceso y permitir la adaptación a idiomas y necesidades locales.
Acerca de CENIA
El Centro Nacional de Inteligencia Artificial (CENIA) es una corporación privada sin fines de lucro fundada en 2021. CENIA reúne un ecosistema multidisciplinario que abarca la investigación de frontera en IA, el desarrollo de aplicaciones, la investigación sobre el avance y el impacto social de la IA, y la formación de talento para enfrentar los desafíos del futuro. Su misión es impulsar el desarrollo y la adopción responsable de la IA para mejorar el bienestar de las personas y contribuir al desarrollo económico sostenible de América Latina y el Caribe.
Acerca de Microsoft
Microsoft (Nasdaq “MSFT” @microsoft) crea plataformas y herramientas impulsadas por IA para ofrecer soluciones innovadoras que satisfagan las necesidades cambiantes de sus clientes. La compañía está comprometida con que la IA esté ampliamente disponible y lo hace de manera responsable, con la misión de empoderar a cada persona y organización del planeta para lograr más.