Cloud Network & Security Brief

Cloud provider networking

AWS — Client VPN → Transit Gateway native attach

2026-06-15

AWS Client VPN now attaches natively to AWS Transit Gateway, removing the need for a dedicated hosting VPC. Simplifies hub-and-spoke remote access architectures significantly.

aws.amazon.com

AWS — Load Balancer Controller + Global Accelerator

2026-06-15

The AWS Load Balancer Controller now exposes AWS Global Accelerator via a declarative Kubernetes API. Up to 60% performance improvement claimed for latency-sensitive global workloads.

aws.amazon.com

AWS — Instance Bandwidth Configuration (IBC)

2026-06-15

New instance types support IBC, allowing up to 25% bandwidth rebalancing between EBS and VPC networking. Useful for IO-heavy workloads needing dynamic network allocation.

aws.amazon.com

Azure — Defender for Cloud: AWS RDS GA

2026-06-01

Microsoft Defender for Open-Source Relational Databases reached GA for AWS RDS instances on June 1. Billing began for preview-onboarded instances. Cross-cloud threat detection now billed.

learn.microsoft.com

AWS + GCP — Multicloud interconnect interoperability spec

2025-12 (ongoing)

AWS Interconnect – Multicloud and GCP Cross-Cloud Interconnect now share an open interoperability spec. Preview: 1 Gbps, five regions; GA target: 100 Gbps. Azure join expected later in 2026.

infoq.com

AI infrastructure

Cisco × NVIDIA — N9100 Spectrum-6 switch

2026-06-18

Cisco announced the N9100 powered by NVIDIA Spectrum-6 Ethernet silicon: 102.4T, 100% liquid-cooled, targeting AI data centre scale-out. Nexus Hyperfabric integration provides cloud-managed full-stack AI infrastructure.

blogs.cisco.com

Upscale AI — $190M raise, "next Cisco" positioning

2026-06-22

Upscale AI closed a $190M round backed by Seligman Ventures and Premji. Positioning as an intent-driven AI networking fabric vendor. Worth watching for competitive overlap with Cisco/Arista in AI DC switching.

fortune.com

Arista — Etherlink UEC alignment

ongoing

Arista's Etherlink positioned as "UEC forwards-compatible": dynamic load balancing, RDMA-aware QoS, AI Analyzer telemetry on EOS/CloudVision. Ullal publicly advocates Ethernet as "eventual winner" for AI fabrics.

fierce-network.com

CVEs & vulnerabilities

CVE-2026-50751 — Check Point VPN IKEv1 auth bypass

2026-06-08

Critical auth bypass in Check Point Remote Access VPN, Mobile Access, and Spark Firewall via IKEv1 certificate validation logic flaw. Unauthenticated VPN session establishment without credentials. Earliest exploitation observed May 7. Qilin ransomware affiliate confirmed post-compromise. Hotfix available.

CVSS 9.3 Critical KEV: YES Exploited in Wild CWE-287

blog.checkpoint.com

CVE-2026-50752 — Check Point VPN IKEv1 MITM

2026-06-08

Related vulnerability in the same IKEv1 code path. Enables man-in-the-middle attack against site-to-site VPN tunnels under specific configurations. Identified during Check Point's investigation of CVE-2026-50751.

CVSS 7.4 High KEV: no (at time of writing) CWE-300

beazley.security

CVE-2026-24858 — Fortinet auth bypass (FortiCloud SSO)

2026-06

Critical auth bypass (CWE-288) affecting FortiOS, FortiProxy, FortiManager, FortiAnalyzer, FortiWeb when FortiCloud SSO is enabled. CVSS 9.4 (vendor advisory) / 9.8 (NVD — discrepancy noted). Patches available.

CVSS 9.4 Critical (advisory) / 9.8 NVD KEV: unconfirmed CWE-288

labs.cloudsecurityalliance.org

FortiBleed — mass FortiGate credential exposure (non-CVE campaign)

2026-06-20

73,000–87,000 Fortinet FortiGate devices across 194 countries have plaintext VPN credentials published on criminal forums. Not a new CVE — credential reuse + brute force against default/weak passwords, no MFA. No patch closes this; immediate MFA enforcement and credential rotation required.

Active Campaign No patch available 194 countries

arcticwolf.com

Vendor announcements

Check Point — IKEv1 hotfix released

2026-06-08

Emergency hotfix issued for CVE-2026-50751 and CVE-2026-50752. CISA gave federal agencies 3 days to patch. IKEv1 is a deprecated protocol — Check Point advises migration to IKEv2 alongside patching.

blog.checkpoint.com

Cisco — Silicon One G300 GA

2026-02 (shipping)

Silicon One G300 announced as next-gen scale-up platform for agentic-AI era. Pairs with NVIDIA Spectrum-6 in the N9100 reference design for liquid-cooled AI DC switching at 102.4T.

newsroom.cisco.com

Cloudflare — SGW & data protection features

2026-06 (mid-year)

Cloudflare shipping new Secure Web Gateway access control capabilities and data protection features, per their mid-2026 roadmap commitment. Part of SSE platform build-out following Gartner MQ recognition.

releasebot.io

Outages & incidents

Cloudflare — 5xx errors, India region

2026-06-25

Cloudflare reported increased 5xx errors in the India region. Identified and fix being implemented as of 17:26 UTC June 25. Duration and full scope not yet confirmed in post-mortem.

cloudflarestatus.com

GCP — Elevated latency, India (Delhi, Chennai, Mumbai)

2026-06-25

Google Cloud network traffic originating from Delhi, Chennai, Mumbai experiencing intermittent elevated latency and packet loss as of June 25. Status page lists as active investigation; no post-mortem published yet.

status.cloud.google.com

Cloudflare — CNI 2.0 BGP route propagation issue

2026-06 (recent)

Cloudflare Network Interconnect 2.0 experienced a BGP route propagation issue. Listed in status history; no detailed post-mortem published in the current window.

cloudflarestatus.com