service
AWS Lambda: security advisories, deprecations and releases
Serverless functions on AWS.
- Items, 90 days
- 14
- Critical
- 0
- Last critical
- none
- This week
- 3
What your digest would have held this week
3 items from the last 7 days. Zero sends only the ones that touch your stack.
Security 1
- MEDIUM Cloudanix Threat Intelligence · 2 Oct 2026
EvilTokens
EvilTokens is a Phishing-as-a-Service (PhaaS) platform that emerged in February 2026, operated by the threat actor Storm-2992. It leverages AI to create tailored phishing lures and automates device code phishing attacks to steal OAuth tokens, bypassing MFA. This has led to the compromise of over 12,000 inboxes across 10,000 organizations. Post-compromise, the platform facilitates reconnaissance via Microsoft Graph, persistence through…
Releases 12
- INFO NEW THIS WEEK AWS What's New · 2 Nov 2026
AWS Lambda adds queue mode for self-managed Kafka event sources
Lambda now supports share groups (Kafka 4.2+) for self-managed Kafka, allowing multiple consumers to read from the same partition for higher throughput without repartitioning.
- INFO NEW THIS WEEK AWS What's New · 29 Oct 2026
AWS Lambda durable functions now exports live telemetry
AWS Lambda durable functions add a Durable Execution Telemetry Exporter that streams step-level history to 13 destinations and includes an MCP server for AI-driven queries.
- INFO NEW THIS WEEK AWS What's New · 29 Oct 2026
AWS Lambda supports SOCI lazy loading for OCI images
AWS Lambda now supports Seekable OCI (SOCI) for lazy loading of large container images, reducing cold-start times by up to 70% on Lambda Managed Instances.
- MEDIUM AWS News Blog · 19 Oct 2026
Lambda Web Functions pricing and concurrency
Each environment now handles 128 concurrent requests and bills CPU time instead of wall-clock time, changing cost for SSR, API, and streaming workloads.
- MEDIUM AWS News Blog · 19 Oct 2026
AWS Lambda Durable Execution SDK for Go GA
Durable Go SDK now GA; write multi-step workflows that checkpoint and wait up to a year without external state stores.
- INFO AWS What's New · 16 Oct 2026
AWS Lambda durable functions now in GovCloud (US)
Durable functions with step, wait, and automatic recovery are now available for Lambda in GovCloud US-West and US-East.
- INFO AWS What's New · 16 Oct 2026
AWS Lambda recursive loop detection now supports EventBridge Custom event buses
Lambda recursive loop detection now stops loops between Event Functions and EventBridge Custom event buses, enabled by default in all commercial regions.
- INFO AWS What's New · 14 Oct 2026
AWS Lambda durable functions raises durable ops limit to 30k and checkpoint size to 1 MB
AWS Lambda durable functions now supports 30,000 operations per execution and 1 MB checkpoint payloads, enabling larger workflows, longer polling, and bigger conversation histories without external storage.
- INFO AWS News Blog · 13 Oct 2026
AWS Lambda Web Functions announced for standard HTTP web apps
AWS launches Lambda Web Functions, allowing standard Node.js HTTP servers like Express, Fastify, or Next.js to run on Lambda without event-handler rewrites. Supports multi-concurrent execution, active CPU billing, and automatic multi-region deployment.
- INFO AWS What's New · 13 Oct 2026
AWS Lambda announces Lambda Web Functions
New serverless primitive lets code handle HTTP requests directly using familiar frameworks like Express or Hono, without adapters.
- INFO AWS What's New · 9 Oct 2026
AWS Lambda adds OAuth auth for self-managed Kafka event sources
Lambda now supports OAuth for Apache Kafka ESMs, allowing authentication via enterprise identity providers such as Cognito or Okta.
- INFO AWS What's New · 3 Oct 2026
AWS Lambda durable functions now available in European Sovereign Cloud
Durable functions add step and wait primitives to Lambda for Python 3.13/3.14, Node.js 22/24, and Java 17+, enabling checkpointing and failure recovery.
News and tools 1
- INFO AWS News Blog · 13 Oct 2026
AWS Prime Day 2026: 2.3 quadrillion ElastiCache requests, 59 trillion DynamoDB ops
Recap of Prime Day 2026 shows AWS services handling trillions of requests daily with no incidents, aided by 44,000 pre-event fault experiments.
Only hear about AWS Lambda when it touches your stack
Tell Zero what you run. You get one email, and only on the days something above applies to you.