Author: DEROBS

  • AWS engineers detail measurement-driven approach for auto-scaling text-to-speech endpoints

    AWS engineers detail measurement-driven approach for auto-scaling text-to-speech endpoints

    Engineers at AWS have introduced a structured, measurement-based methodology for configuring auto-scaling policies on Amazon SageMaker AI real-time endpoints, specifically tailored for latency-sensitive text-to-speech (TTS) models. The approach aims to address the common industry practice of estimating scaling targets, which can lead to either unnecessary infrastructure costs or service level objective (SLO) breaches during traffic spikes.

    As outlined in a recent technical post, standard auto-scaling metrics often rely on token-generation rates. However, TTS models like the 82-million-parameter Kokoro-82M function differently, holding connections open for the duration of an utterance without a traditional token-generation loop. To avoid misaligned scaling, the team proposes deriving policy thresholds from two specific, measured variables: Q_max, the maximum concurrency one instance can sustain before breaching latency targets, and T_total, the wall-clock time required for a new instance to begin serving healthy traffic.

    The methodology utilizes a five-step command-line tool chain—drift, qmax, ttotal, plan, and validate—to reconcile deployment states with actual performance data. By measuring these values on a live endpoint, operators can mathematically calculate optimal scale-out and scale-in thresholds. The researchers noted that scaling on the natively published ConcurrentRequestsPerModel metric, rather than retrofitting external metrics, helps prevent configuration-related failures.

    In the documented case study for the Kokoro-82M model running on an ml.g5.xlarge instance, the team established a concurrency ceiling of 50 requests. The findings also highlighted the importance of asymmetric cooldown periods: scaling out is prioritized for speed, while scale-in cooldowns are set to roughly three times the duration of T_total to ensure traffic stability and prevent “flapping” between instance counts.

    The authors emphasize that while the specific figures for Kokoro-82M are tied to a particular model and instance type, the underlying logic is intended to be generalized for other concurrency-bound, latency-sensitive real-time endpoints, such as image-embedding services. This approach ensures that auto-scaling configurations remain defensible and rooted in empirical evidence, rather than relying on estimates that could fail silently under production load.

    Source: aws.amazon.com
    Original article: https://aws.amazon.com/blogs/machine-learning/stop-guessing-auto-scaling-targets-for-tts-on-amazon-sagemaker-ai/

  • Microsoft files for development of data center campus in Floyd County, Georgia

    Microsoft files for development of data center campus in Floyd County, Georgia

    Microsoft has formally filed for the development of a new data center campus located in Floyd County, Georgia. According to the development plans, the proposed project is slated to include the construction of three individual data center buildings.

    This filing marks a continued effort by the company to expand its physical digital infrastructure to support growing cloud and data processing demands. Further details regarding the project’s timeline, capacity, and investment value have not been disclosed in the current documentation.

    Source: Data Center Dynamics
    Original article: https://www.datacenterdynamics.com/en/news/microsoft-files-for-data-center-campus-in-floyd-county-georgia/

  • Scaling data throughput for GPU-accelerated AI workloads

    Scaling data throughput for GPU-accelerated AI workloads

    As artificial intelligence models expand in complexity and scale, the hardware and software systems supporting them face increasing pressure to maintain high throughput. According to data from the 2025 Stanford AI Index, the computational power required for notable AI models has doubled approximately every five months, while the size of the datasets used to train large language models (LLMs) has doubled every eight months.

    This rapid growth highlights a critical bottleneck: the efficient transfer of data from storage to the accelerators responsible for processing. As computation and data requirements scale in tandem, the ability to move information rapidly into GPU memory becomes a primary factor in maintaining performance efficiency.

    NVIDIA has outlined technical approaches for addressing these challenges, specifically focusing on the use of NVIDIA GPUDirect Storage. This technology is designed to facilitate direct data movement between storage devices and GPU memory, bypassing the traditional system memory bottlenecks that can hinder high-performance computing applications. By reducing latency and minimizing CPU overhead, such methods allow GPU-accelerated applications to process ever-growing datasets more effectively, keeping pace with the rising compute demands identified in industry research.

    Source: NVIDIA
    Original article: https://developer.nvidia.com/blog/how-to-read-data-into-gpu-memory-in-python-with-nvidia-gpudirect-storage/

  • Microsoft links ConnectWise security breach to China-aligned hackers using AI agents

    Microsoft links ConnectWise security breach to China-aligned hackers using AI agents

    Microsoft has attributed a significant security breach affecting IT service management company ConnectWise to hackers aligned with China. According to reports, the attackers successfully compromised the company’s systems and gained unauthorized access to data belonging to thousands of its customers.

    A notable aspect of the security incident was the attackers’ use of artificial intelligence agents. Microsoft investigators indicated that these AI-driven tools allowed the hackers to conduct their operations with increased speed and efficiency, enabling them to breach thousands of customer environments rapidly.

    As of this reporting, the incident highlights ongoing concerns regarding the intersection of advanced automated tools and state-aligned cyber operations. The breach has prompted discussions within the industry regarding the evolving capabilities of threat actors to scale their activities through the deployment of AI-based systems.

    Source: TechCrunch
    Original article: https://techcrunch.com/2026/10/22/chinese-hackers-spied-on-thousands-of-companies-after-breaching-it-giant-connectwise/

  • Arista releases security update for actively exploited VeloCloud Orchestrator zero-day

    Arista releases security update for actively exploited VeloCloud Orchestrator zero-day

    Arista Networks has issued security updates to remediate a zero-day vulnerability affecting its VeloCloud Orchestrator (VCO) On-Prem software. The company confirmed that the vulnerability has been utilized in active, ongoing attacks.

    VeloCloud Orchestrator is a centralized management system used to configure and monitor wide-area network (WAN) services. The discovery of an actively exploited flaw necessitates prompt attention from organizations operating on-premises versions of the platform to mitigate the risk of unauthorized access or system compromise.

    As of this reporting, Arista Networks is working to address the security gap, and administrators are encouraged to review official advisory documentation to apply the necessary patches. Given the nature of the exploit, users should prioritize the deployment of these updates to maintain the integrity of their network infrastructure.

    Source: BleepingComputer
    Original article: https://www.bleepingcomputer.com/news/security/arista-patches-new-velocloud-orchestrator-zero-day-exploited-in-attacks/

  • Reducing latency in AI voice agents with Kokoro TTS and Amazon SageMaker

    Reducing latency in AI voice agents with Kokoro TTS and Amazon SageMaker

    AI voice agents often struggle with high latency, as they typically wait for a full response to be generated before beginning audio synthesis. This design gap can result in significant delays, leaving users waiting for audio to start. A new solution, leveraging the Kokoro-82M text-to-speech (TTS) model on Amazon SageMaker AI, demonstrates how to minimize this latency by streaming individual sentences to the TTS model as soon as the agent produces them.

    The mechanism for reduced latency

    By implementing a bidirectional streaming architecture, the system allows audio playback to commence on the first sentence of a response, rather than waiting for the entire multi-paragraph output. The Kokoro-82M model, which contains 82 million parameters, is deployed in a custom container on a SageMaker AI real-time endpoint using an ml.g5.xlarge GPU instance. This setup maintains both low latency and cost-efficiency for agents handling real-world traffic.

    To achieve this, the system uses a persistent WebSocket connection that multiplexes raw binary audio and JSON control frames. This approach avoids the overhead associated with base64-encoding audio for transport, which can inflate payloads by approximately 33% and complicate frame alignment.

    Technical implementation

    The solution requires handling specific WebSocket frame types and maintaining an open session between messages. Developers use an IncrementalSentenceChunker class to process incoming text fragments and identify completed sentences for immediate synthesis. This ensures that synthesis starts as soon as a grammatical unit is formed, providing a smoother experience for the end user.

    Testing confirms significant performance improvements. In isolation, sending a single sentence to the endpoint cut the time to the first audio byte by 52.4%. When integrated into a real-world agent workflow, the bidirectional streaming approach demonstrated a 2.4 to 3.5 times improvement in speed compared to traditional batch-processing methods, where synthesis waits for the complete response generation.

    Considerations for deployment

    While the unified binary and JSON approach optimizes for latency, the provided guidance notes that for existing architectures already utilizing Server-Sent Events (SSE), a base64-encoded audio approach may remain a pragmatic, albeit less efficient, option. Engineers should prioritize robust handling of binary frames and avoid eager session closure to ensure consistent performance across multiple sentences. Developers are encouraged to review the provided AWS repository and ensure all container security pins, such as those related to PyTorch, are addressed for production use.

    Source: aws.amazon.com
    Original article: https://aws.amazon.com/blogs/machine-learning/stream-low-latency-speech-from-ai-agents-using-kokoro-tts-on-amazon-sagemaker-ai/

  • Implementing agentic AI within HIPAA-eligible AWS environments

    Implementing agentic AI within HIPAA-eligible AWS environments

    As healthcare organizations increasingly adopt agentic AI to automate workflows and extract insights from complex data, the need for robust regulatory alignment has become paramount. Amazon Quick is now recognized as a HIPAA-eligible service, providing a platform for organizations to build applications that process Protected Health Information (PHI) under a signed Business Associate Addendum (BAA) with AWS.

    Understanding HIPAA Eligibility vs. Compliance

    The distinction between service eligibility and organizational compliance is critical for developers. While Amazon Quick meets the requirements to be designated HIPAA-eligible—meaning it can securely store, transmit, and process PHI—it does not automatically grant HIPAA compliance to a user’s environment. True compliance remains a shared responsibility, requiring organizations to properly configure controls, implement administrative safeguards, and conduct necessary workforce training.

    Architecting for Regulated Environments

    Amazon Quick operates through two primary data paths for PHI: an unstructured path via knowledge bases, governed by document-level access control lists (ACLs), and a structured path through Amazon Quick Sight, managed by row- and column-level security. To maintain a secure environment, AWS recommends an ‘upstream-first’ governance model where data is de-identified and prepared using services like AWS Glue and Lake Formation before it reaches the Amazon Quick agentic workspace.

    Key Security Principles for Agentic AI

    Because agentic AI systems are capable of invoking tools and taking autonomous actions, AWS advises a ‘defense-in-depth’ approach. Administrators are encouraged to prioritize deterministic infrastructure controls—such as IAM policies and network boundaries—over prompt-based instructions, which can be susceptible to adversarial manipulation. Furthermore, AWS outlines four core security principles for agentic AI, which include layering safeguards onto existing security frameworks, trusting deterministic controls, and adopting a strategy of progressive autonomy where agents begin in read-only modes before gaining broader operational capabilities.

    Implementation Best Practices

    For organizations deploying Amazon Quick, several irreversible configuration decisions must be made during initial setup. Registering a customer-managed AWS KMS key and establishing a specific identity model (such as AWS IAM Identity Center) are foundational steps that cannot be modified later. Additionally, maintaining a comprehensive audit trail is essential; administrators should explicitly configure CloudWatch vended logs for chat interactions and feedback, ensuring that data-protection masking is applied to avoid the accidental storage of PHI in cleartext.

    By separating PHI-containing knowledge bases from general productivity tools and enforcing the principle of least privilege, organizations can leverage the capabilities of agentic AI while maintaining the rigor required by healthcare regulations.

    Source: aws.amazon.com
    Original article: https://aws.amazon.com/blogs/machine-learning/deploy-ai-in-a-hipaa-eligible-environment-with-amazon-quick/

  • Wise adjusts pricing model for money transfers and card services

    Wise adjusts pricing model for money transfers and card services

    Financial technology firm Wise has adjusted its pricing strategy for international money transfers. According to recent reports, the company is lowering the costs associated with its core transfer services, opting instead to generate revenue through its card products and related payment features.

    This shift reflects a broader trend in the digital payments sector, where providers seek to maintain competitiveness in exchange services by rebalancing fee structures across their wider ecosystem of financial products. By reducing transfer fees, Wise aims to attract and retain users, while utilizing its card service offering to capture ongoing transaction-based revenue.

    As these developments involve ongoing business strategy, stakeholders continue to monitor how such changes impact the company’s overall unit economics and its competitive positioning against traditional banking institutions and other digital transfer providers.

    Source: Finextra
    Original article: https://www.finextra.com/blogposting/33256/wise-is-cutting-its-transfer-price-and-making-it-back-on-cards?utm_medium=rssfinextra&utm_source=finextrafeed

  • Nvidia reportedly in talks to invest in Firmus

    Nvidia reportedly in talks to invest in Firmus

    Nvidia is reportedly in negotiations to invest hundreds of millions of dollars into the cloud provider Firmus. The reported interest comes following a failed initial public offering (IPO) for the company.

    Firmus, which operates as a neocloud provider, has been the subject of recent reports regarding potential financial backing from the semiconductor giant. No further details regarding the terms of the potential investment or the status of the discussions have been disclosed at this time.

    Source: Data Center Dynamics
    Original article: https://www.datacenterdynamics.com/en/news/nvidia-in-talks-to-invest-in-firmus-after-failed-ipo-report/

  • T-Mobile reports first AI-RAN mobile call with Nokia and Nvidia

    T-Mobile reports first AI-RAN mobile call with Nokia and Nvidia

    T-Mobile announced that it has successfully completed what it describes as the world’s first AI-RAN (Artificial Intelligence-Radio Access Network) call. The test took place at a commercial cell site located in Bellevue, Washington.

    The initiative involved collaboration with technology providers Nokia and Nvidia. While the announcement confirms the successful completion of the call, further technical details regarding the performance improvements or specific implementation of the AI-RAN architecture remain limited beyond the site of the event.

    Source: Data Center Dynamics
    Original article: https://www.datacenterdynamics.com/en/news/t-mobile-claims-world-first-ai-ran-call-with-nokia-and-nvidia/