• Honey, I Shrunk the Cloud SQL Disk Using DMS
• EKS Auto Mode Opens the Gateway, and Ingress Gets Put Out to Pasture
• Cap It Like It’s Hot: Google Cloud Budgets Get Teeth
• Claude Code Eats OpenAI’s Lunch While Investors Check Their Wallets
• Google Cloud Spend Caps: Because “Oops” Shouldn’t Cost Five Figures
• Step Functions Teaches AI Agents to Follow the Steps
• Google Cloud Lets You Run VMware Yourself: Bare Metal, Bare Hands

RDS Snapshot Billing Finally Lets You Snap Back at Your Costs

Vault Me Maybe: Giving AI Agents a Real ID

Pacific Cable Sabotage Risk Has Big Tech Feeling Deep-Sea Anxious

A big thanks to this week’s sponsors:

We’re sponsorless! Want to get your brand, company, or service in front of a very enthusiastic group of cloud news seekers? You’ve come to the right place! Send us an email or hit us up on our Slack channel for more info.

01:19 Follow up from Show 372 – Are Microsoft’s recently patched vulnerabilities

being found internally or by outside researchers?

• Item to be followed up on: Determine whether Microsoft’s CVE discoveries are found internally or externally (A host states whether Microsoft’s recent surge in patched vulnerabilities came from internal AI-assisted discovery versus external researchers.)
• What we said in Episode 372: “Kind of what I wonder with some of these also is where are they finding the vulnerabilities? Is it end users who are finding them still, or external people, or is it them doing it internally and finding them? And they don’t really share those types of metrics.” [5:03] — Justin
• What was learned: Both — Microsoft has confirmed it’s a mix of internal AI-assisted discovery and external researchers (increasingly also using AI), and Microsoft has started sharing some detail on this split rather than staying fully silent.

• Microsoft’s MSRC blog says a larger share of this month’s patched issues were found internally, with many surfaced through AI investments.
• Microsoft credits a new multi-model AI-driven scanning harness (MDASH) with finding 16 vulnerabilities in one month, including 4 critical, before any human researcher.
• Some vulnerabilities were also credited to external researchers who collaborated with AI tools.

• Links for more information:

• https://www.microsoft.com/en-us/msrc/blog/2026/05/a-note-on-patch-tuesday
• https://blogs.windows.com/windowsexperience/2026/07/09/evolving-windows-vulnerability-management-to-meet-the-speed-of-ai-powered-discovery/
• https://www.microsoft.com/en-us/security/blog/2026/05/12/defense-at-ai-speed-microsofts-new-multi-model-agentic-security-system-tops-leading-industry-benchmark/
• https://www.microsoft.com/en-us/security/blog/2026/10/07/3-lessons-from-frontier-ai-vulnerability-research/
• https://www.bleepingcomputer.com/news/microsoft/microsoft-expects-more-windows-security-updates-from-ai-discovered-flaws/

05:09