AWS Launches Continuum for Code Vulnerabilities to Enhance Security
Article Content
- •AWS Continuum automates vulnerability identification and remediation.
- •The service ranks vulnerabilities based on business impact and exploitability.
- •Human approval is required for proposed fixes before deployment.
AWS announced the general availability of AWS Continuum, a security service designed to identify and validate code vulnerabilities. The service automates the delivery of fixes as patches or pull requests, confirming which findings are exploitable and ranking issues by business impact. Continuum builds a context graph from code repositories and AWS environments to assess vulnerability reachability and business-critical systems. This tool aims to reduce the time taken for manual investigation and coordination across security teams. By using AI models, Continuum addresses the increasing volume of findings generated by vulnerability scanners, which can produce thousands of alerts daily. The service proposes fixes that require human approval before deployment, with future plans for automated actions within defined guardrails.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track AWS in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What vulnerabilities does AWS Continuum address?
How does Continuum prioritize vulnerabilities?
Is human intervention required for fixes?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…
Critical SQL Injection Zero-Day in Arista VeloCloud Orchestrator Exploited Arista Networks has patched a critical zero-day vulnerability (CVE-2026-114625) in its VeloCloud Orchestrator (VCO) that is actively being exploited. The flaw allows authenticated users, even those with basic privileges, to escalate their access to superuser status via a low-complexity SQL injection attack. This…