{"article":{"annotation":{"article_id":"aws-continuum-fresh-cve-benchmark-audited-results-2026","available_at":"2026-10-15T21:30:26.632835Z","geography_revision":"ef6ee0010dda5fe7b240fd514749b43e214c57da73222d2e40ec83b276dd0977","id":"8f008de421b5b3f30c787b9e0c0f037f050450632850a673dbc243662ba2afbb","input_sha256":"3c88571ec4a53e85117b9ff1ff90bd2cefdfe78465a61c4665cf8dd43513dd6e","limitations":["Rule-derived subjects are candidates, not verified editorial labels or calibrated model probabilities.","Coverage is distinct from event location. Unknown country/city/coordinates remain absent; no automatic geocoding.","Article geometries keep their stated precision and methodology; reproducing them is not independent coordinate verification."],"method":"controlled-rules-v1","places":[{"admin1":null,"city":null,"coordinate_note":null,"coordinate_reference_system":"OGC:CRS84","coordinate_source":null,"country":"US","evidence":[{"field":"country","language":"en","note":"Explicit preserved editorial country/region; no city or national centroid inferred","source_urls":["https://aws.amazon.com/blogs/security/aws-security-agent-now-part-of-aws-continuum-exploited-33-of-37-new-real-world-cves/"]}],"geometry":null,"id":"iso3166-1:US","kind":"country-or-area","labels":{"ar":"الولايات المتحدة الأمريكية","en":"United States of America","es":"Estados Unidos de América","fr":"États-Unis d’Amérique"},"match_status":"candidate","precision":"regional","role":"coverage","uncertainty_m":null}],"rules_sha256":"fb5ad3c27c91cb840f7a0a05f7f64a5cb26ad0374409ff9457f277c7092e22b4","schema_version":1,"subjects":[{"concept_id":"medtop:13000000","confidence":null,"confidence_method":null,"evidence":[{"field":"category+topics","language":"en","note":"Preserved editorial category/topic; broad candidate only","source_urls":["https://aws.amazon.com/blogs/security/aws-security-agent-now-part-of-aws-continuum-exploited-33-of-37-new-real-world-cves/"]}],"method":"controlled-rules-v1","rule_id":"technology-broad","status":"candidate"}],"taxonomy_revision":"1f2db31d811fca07e99b16d402c10e2cc2965c9df1c7b41d9be348b40a24e7fb","taxonomy_version":"IPTC Media Topics 2026-Q2"},"api_url":"https://newsverum.com/api/v1/articles/aws-continuum-fresh-cve-benchmark-audited-results-2026?lang=en","category":"technology","content":{"key_points":[],"paragraphs":["AWS published an evaluation on October 15 testing its security agent, now part of AWS Continuum, on 37 disclosed vulnerabilities from 2025–2026. It captured 35 flags in isolated, containerized targets; the company’s per-sample trajectory audit confirmed that 33 were obtained through the intended vulnerability. The adjusted success rate was 89.2%. The run used Claude Opus 5 for one epoch with a 10-hour limit per sample.","Two captures used a different path and were counted as unsolved; in two other tests the target failed before the flag could be read. Runtime CVE and public exploit lookup was disabled. AWS describes the benchmark as contamination-reduced, without guaranteeing it is contamination-free; these are company-reported results for this internal sample, not an independent audit."],"sections":[]},"corrections":[],"country":"US","data":{"blocks":[{"description":{"ar":"AWS تعلن نجاحاً عبر المسار المقصود في 33 من 37 اختباراً لثغرات حديثة","de":"AWS meldet vorgesehenen Exploit-Pfad bei 33 von 37 neuen Schwachstellentests","en":"AWS reports intended-path success on 33 of 37 fresh vulnerability tests","es":"AWS informa de 33 éxitos por la vía prevista en 37 pruebas de vulnerabilidades recientes","fr":"AWS annonce 33 réussites par la voie prévue sur 37 tests de vulnérabilités récentes","pt":"AWS relata 33 sucessos pelo caminho previsto em 37 testes de vulnerabilidades recentes","tr":"AWS, yeni güvenlik testinde 37 açığın 33’ünde amaçlanan yoldan başarı bildirdi"},"id":"research-publication","items":[{"date":"2026-10-15","description":{"ar":"نشرت AWS في 15 أكتوبر تقييماً لوكيلها الأمني، الذي أصبح جزءاً من AWS Continuum، على 37 ثغرة معلنة من عامي 2025–2026. حصل الوكيل على 35 علامة داخل أهداف معزولة قائمة على الحاويات؛ وأكد تدقيق الشركة لمسار كل عينة أن 33 علامة استُخرجت عبر الثغرة المقصودة. وبلغ معدل النجاح المعدل 89.2%.","de":"AWS veröffentlichte am 15. Oktober eine Bewertung seines inzwischen zu AWS Continuum gehörenden Sicherheitsagenten anhand von 37 in den Jahren 2025–2026 offengelegten Schwachstellen. Er erfasste 35 Flags in isolierten Container-Zielen; die unternehmenseigene Prüfung der einzelnen Abläufe bestätigte 33 Erfolge über die vorgesehene Schwachstelle. Die bereinigte Erfolgsquote betrug 89,2 Prozent.","en":"AWS published an evaluation on October 15 testing its security agent, now part of AWS Continuum, on 37 disclosed vulnerabilities from 2025–2026. It captured 35 flags in isolated, containerized targets; the company’s per-sample trajectory audit confirmed that 33 were obtained through the intended vulnerability. The adjusted success rate was 89.2%.","es":"AWS publicó el 15 de octubre una evaluación de su agente de seguridad, ahora parte de AWS Continuum, sobre 37 vulnerabilidades divulgadas en 2025–2026. Capturó 35 banderas en objetivos aislados en contenedores; la auditoría de trayectorias de la empresa confirmó que 33 se obtuvieron mediante la vulnerabilidad prevista. La tasa ajustada fue del 89,2%.","fr":"AWS a publié le 15 octobre une évaluation de son agent de sécurité, désormais intégré à AWS Continuum, sur 37 vulnérabilités divulguées en 2025–2026. L’agent a récupéré 35 drapeaux dans des cibles isolées en conteneurs; l’audit des trajectoires par l’entreprise a confirmé 33 réussites via la vulnérabilité prévue. Le taux ajusté est de 89,2 %.","pt":"A AWS publicou em 15 de outubro uma avaliação de seu agente de segurança, agora parte do AWS Continuum, com 37 vulnerabilidades divulgadas em 2025–2026. O agente capturou 35 bandeiras em alvos isolados em contêineres; a auditoria das trajetórias pela empresa confirmou 33 capturas pela vulnerabilidade prevista. A taxa ajustada foi de 89,2%.","tr":"AWS, 15 Ekim’de AWS Continuum kapsamındaki güvenlik ajanını 2025–2026 döneminden 37 açıklanmış güvenlik açığıyla sınadığı değerlendirmeyi yayımladı. Yalıtılmış, konteyner tabanlı hedeflerde 35 test işareti elde edildi; şirketin her örneğin izini inceleyen denetimi, bunların 33’ünün amaçlanan güvenlik açığı üzerinden alındığını doğruladı. Düzeltilmiş başarı oranı yüzde 89,2 oldu."},"label":{"ar":"نشر تقرير البحث","de":"Veröffentlichung des Forschungsberichts","en":"Publication of the research report","es":"Publicación del informe de investigación","fr":"Publication du rapport de recherche","pt":"Publicação do relatório de pesquisa","tr":"Araştırma yazısının yayımlanması"},"status":"occurred"}],"methodology":{"ar":"تُنسب نتائج البحث إلى المصدر؛ ولم يُجرَ قياس مستقل للأداء.","de":"Die Ergebnisse werden der Quelle zugeschrieben; keine unabhängige Leistungsmessung.","en":"Reported research results are attributed to the source; no independent performance measurement was made.","es":"Los resultados se atribuyen a la fuente; no se midió el rendimiento de forma independiente.","fr":"Les résultats sont attribués à la source, sans mesure indépendante des performances.","pt":"Os resultados são atribuídos à fonte; não houve medição independente de desempenho.","tr":"Bildirilen araştırma sonuçları kaynağa atfedilmiştir; bağımsız performans ölçümü yapılmamıştır."},"sourceUrls":["https://aws.amazon.com/blogs/security/aws-security-agent-now-part-of-aws-continuum-exploited-33-of-37-new-real-world-cves/"],"title":{"ar":"AWS تعلن نجاحاً عبر المسار المقصود في 33 من 37 اختباراً لثغرات حديثة","de":"AWS meldet vorgesehenen Exploit-Pfad bei 33 von 37 neuen Schwachstellentests","en":"AWS reports intended-path success on 33 of 37 fresh vulnerability tests","es":"AWS informa de 33 éxitos por la vía prevista en 37 pruebas de vulnerabilidades recientes","fr":"AWS annonce 33 réussites par la voie prévue sur 37 tests de vulnérabilités récentes","pt":"AWS relata 33 sucessos pelo caminho previsto em 37 testes de vulnerabilidades recentes","tr":"AWS, yeni güvenlik testinde 37 açığın 33’ünde amaçlanan yoldan başarı bildirdi"},"type":"events","updatedAt":"2026-10-15T21:06:30+00:00"},{"columns":[{"key":"result","label":{"ar":"النتيجة","de":"Ergebnis","en":"Result","es":"Resultado","fr":"Résultat","pt":"Resultado","tr":"Sonuç"},"type":"text"},{"key":"count","label":{"ar":"العدد","de":"Anzahl","en":"Count","es":"Cantidad","fr":"Nombre","pt":"Contagem","tr":"Sayı"},"type":"number","unit":"count"}],"description":{"ar":"أعداد تقييم CVE الداخلي لدى AWS","de":"Zahlen der internen AWS-CVE-Bewertung","en":"AWS internal CVE evaluation counts","es":"Recuentos de la evaluación CVE interna de AWS","fr":"Décomptes de l’évaluation CVE interne d’AWS","pt":"Contagens da avaliação CVE interna da AWS","tr":"AWS dahili CVE değerlendirme sayıları"},"id":"audited-cve-results","methodology":{"ar":"نتائج الجولة الواحدة في تقرير AWS بتاريخ 15 أكتوبر: Claude Opus 5 وحد 10 ساعات لكل عينة. استُبعدت علامتان من أصل 35 بعد التدقيق لاستخدام مسار آخر؛ ولا تُجمع الصفوف. لم يُجر اختبار مستقل.","de":"Ergebnisse eines Durchgangs laut AWS-Bericht vom 15. Oktober: Claude Opus 5, 10 Stunden je Beispiel. Zwei von 35 Roh-Erfassungen wurden nach Prüfung wegen eines anderen Pfads ausgeschlossen; Zeilen sind nicht additiv. Kein unabhängiger Test.","en":"Single-epoch results in AWS’s October 15 report: Claude Opus 5, 10 hours per sample. Two of 35 raw captures were excluded after audit for using another path; rows are not additive. No independent test was conducted.","es":"Resultados de una ronda en el informe de AWS del 15 de octubre: Claude Opus 5, 10 horas por muestra. Dos de las 35 capturas brutas se excluyeron tras auditar la vía; las filas no son sumables. No hubo prueba independiente.","fr":"Résultats sur une passe du rapport AWS du 15 octobre: Claude Opus 5, 10 heures par échantillon. Deux des 35 captures brutes ont été exclues après audit pour voie différente; les lignes ne s’additionnent pas. Aucun test indépendant.","pt":"Resultados de uma rodada no relatório AWS de 15 de outubro: Claude Opus 5, 10 horas por amostra. Duas das 35 capturas brutas foram excluídas após auditoria por outro caminho; as linhas não são somáveis. Não houve teste independente.","tr":"AWS’nin 15 Ekim raporundaki tek tur sonuçları; Claude Opus 5, örnek başına 10 saat sınırı. 35 ham işaretin ikisi denetimde farklı yol nedeniyle çıkarılmıştır; satırlar toplanamaz. Bağımsız test yapılmamıştır."},"rowTranslations":[{"result":{"ar":"الثغرات المستهدفة المختبرة","de":"Getestete Schwachstellenziele","en":"Vulnerability targets tested","es":"Vulnerabilidades objetivo probadas","fr":"Vulnérabilités ciblées testées","pt":"Vulnerabilidades-alvo testadas","tr":"Hedeflenen güvenlik açığı testleri"}},{"result":{"ar":"العلامات المستخرجة قبل التدقيق","de":"Vor Prüfung erfasste Flags","en":"Flags captured before audit","es":"Banderas capturadas antes de la auditoría","fr":"Drapeaux récupérés avant audit","pt":"Bandeiras capturadas antes da auditoria","tr":"Denetim öncesi elde edilen işaretler"}},{"result":{"ar":"النجاحات المدققة عبر المسار المقصود","de":"Geprüfte Erfolge über den vorgesehenen Pfad","en":"Audited intended-path successes","es":"Éxitos auditados por la vía prevista","fr":"Réussites auditées par la voie prévue","pt":"Sucessos auditados pelo caminho previsto","tr":"Amaçlanan yoldan doğrulanan başarılar"}},{"result":{"ar":"العلامات المعاد تصنيفها لمسار غير مقصود","de":"Wegen abweichenden Pfads neu eingestufte Erfassungen","en":"Captures reclassified as unintended-path","es":"Capturas reclasificadas por vía no prevista","fr":"Captures reclassées pour voie non prévue","pt":"Capturas reclassificadas por caminho não previsto","tr":"Farklı yol nedeniyle yeniden sınıflandırılanlar"}},{"result":{"ar":"الإخفاقات بعد تعطل الهدف","de":"Fehlschläge nach Ausfall des Ziels","en":"Misses after target failure","es":"Fallos tras la caída del objetivo","fr":"Échecs après panne de la cible","pt":"Falhas após indisponibilidade do alvo","tr":"Hedef arızası nedeniyle işaret okunamayanlar"}}],"rows":[{"count":37,"result":"Vulnerability targets tested"},{"count":35,"result":"Flags captured before audit"},{"count":33,"result":"Audited intended-path successes"},{"count":2,"result":"Captures reclassified as unintended-path"},{"count":2,"result":"Misses after target failure"}],"sourceUrls":["https://aws.amazon.com/blogs/security/aws-security-agent-now-part-of-aws-continuum-exploited-33-of-37-new-real-world-cves/"],"title":{"ar":"أعداد تقييم CVE الداخلي لدى AWS","de":"Zahlen der internen AWS-CVE-Bewertung","en":"AWS internal CVE evaluation counts","es":"Recuentos de la evaluación CVE interna de AWS","fr":"Décomptes de l’évaluation CVE interne d’AWS","pt":"Contagens da avaliação CVE interna da AWS","tr":"AWS dahili CVE değerlendirme sayıları"},"type":"table","updatedAt":"2026-10-15T21:07:09+00:00"}],"version":1},"data_downloads":[{"formats":{"csv":"https://newsverum.com/api/v1/articles/aws-continuum-fresh-cve-benchmark-audited-results-2026/data/research-publication?lang=en&format=csv","json":"https://newsverum.com/api/v1/articles/aws-continuum-fresh-cve-benchmark-audited-results-2026/data/research-publication?lang=en&format=json"},"id":"research-publication"},{"formats":{"csv":"https://newsverum.com/api/v1/articles/aws-continuum-fresh-cve-benchmark-audited-results-2026/data/audited-cve-results?lang=en&format=csv","json":"https://newsverum.com/api/v1/articles/aws-continuum-fresh-cve-benchmark-audited-results-2026/data/audited-cve-results?lang=en&format=json"},"id":"audited-cve-results"}],"data_types":["events","table"],"editorial_illustration":{"alt":"Conceptual illustration of technology, processors and connected information.","asset_id":"newsverum-v1-technology","avif_variants":[{"height":320,"url":"https://newsverum.com/assets/newsverum/illustrations/v1/technology-480.avif","width":480},{"height":480,"url":"https://newsverum.com/assets/newsverum/illustrations/v1/technology-720.avif","width":720},{"height":640,"url":"https://newsverum.com/assets/newsverum/illustrations/v1/technology-960.avif","width":960},{"height":800,"url":"https://newsverum.com/assets/newsverum/illustrations/v1/technology-1200.avif","width":1200},{"height":1024,"url":"https://newsverum.com/assets/newsverum/illustrations/v1/technology-1536.avif","width":1536}],"credit":"Newsverum","documentary":false,"height":1024,"kind":"symbolic-editorial-illustration","language":"en","scope":"topic","url":"https://newsverum.com/assets/newsverum/illustrations/v1/technology-1536.webp","variants":[{"height":320,"url":"https://newsverum.com/assets/newsverum/illustrations/v1/technology-480.webp","width":480},{"height":640,"url":"https://newsverum.com/assets/newsverum/illustrations/v1/technology-960.webp","width":960},{"height":1024,"url":"https://newsverum.com/assets/newsverum/illustrations/v1/technology-1536.webp","width":1536}],"width":1536},"event_id":"event-150ea360-e51b-5004-b3f7-bf0514b2135a","event_period":"2026-10-15","event_period_basis":"source-review","id":"aws-continuum-fresh-cve-benchmark-audited-results-2026","image":null,"importance":0.6,"language":"en","modified_at":"2026-10-15T21:30:20+00:00","publication_basis":"publication-record","published_at":"2026-10-15T21:30:20+00:00","reading_minutes":1,"region":"world","section_illustration":{"alt":"Conceptual illustration of technology, processors and connected information.","asset_id":"newsverum-v1-technology","avif_variants":[{"height":320,"url":"https://newsverum.com/assets/newsverum/illustrations/v1/technology-480.avif","width":480},{"height":480,"url":"https://newsverum.com/assets/newsverum/illustrations/v1/technology-720.avif","width":720},{"height":640,"url":"https://newsverum.com/assets/newsverum/illustrations/v1/technology-960.avif","width":960},{"height":800,"url":"https://newsverum.com/assets/newsverum/illustrations/v1/technology-1200.avif","width":1200},{"height":1024,"url":"https://newsverum.com/assets/newsverum/illustrations/v1/technology-1536.avif","width":1536}],"credit":"Newsverum","documentary":false,"height":1024,"kind":"symbolic-editorial-illustration","language":"en","scope":"section","url":"https://newsverum.com/assets/newsverum/illustrations/v1/technology-1536.webp","variants":[{"height":320,"url":"https://newsverum.com/assets/newsverum/illustrations/v1/technology-480.webp","width":480},{"height":640,"url":"https://newsverum.com/assets/newsverum/illustrations/v1/technology-960.webp","width":960},{"height":1024,"url":"https://newsverum.com/assets/newsverum/illustrations/v1/technology-1536.webp","width":1536}],"width":1536},"slug":"aws-continuum-fresh-cve-benchmark-audited-results-2026","sources":[{"checkedAt":"2026-10-15","name":"AWS Security Blog","publishedAt":"2026-10-15","url":"https://aws.amazon.com/blogs/security/aws-security-agent-now-part-of-aws-continuum-exploited-33-of-37-new-real-world-cves/"}],"summary":"AWS published an evaluation on October 15 testing its security agent, now part of AWS Continuum, on 37 disclosed vulnerabilities from 2025–2026. It captured 35 flags in isolated, containerized targets; the company’s per-sample trajectory audit confirmed that 33 were obtained through the intended vulnerability. The adjusted success rate was 89.2%.","text":"AWS published an evaluation on October 15 testing its security agent, now part of AWS Continuum, on 37 disclosed vulnerabilities from 2025–2026. It captured 35 flags in isolated, containerized targets; the company’s per-sample trajectory audit confirmed that 33 were obtained through the intended vulnerability. The adjusted success rate was 89.2%.\n\nAWS published an evaluation on October 15 testing its security agent, now part of AWS Continuum, on 37 disclosed vulnerabilities from 2025–2026. It captured 35 flags in isolated, containerized targets; the company’s per-sample trajectory audit confirmed that 33 were obtained through the intended vulnerability. The adjusted success rate was 89.2%. The run used Claude Opus 5 for one epoch with a 10-hour limit per sample.\n\nTwo captures used a different path and were counted as unsolved; in two other tests the target failed before the flag could be read. Runtime CVE and public exploit lookup was disabled. AWS describes the benchmark as contamination-reduced, without guaranteeing it is contamination-free; these are company-reported results for this internal sample, not an independent audit.","title":"AWS reports intended-path success on 33 of 37 fresh vulnerability tests","topics":[],"translations":[{"api_url":"https://newsverum.com/api/v1/articles/aws-continuum-fresh-cve-benchmark-audited-results-2026?lang=tr","language":"tr","url":"https://newsverum.com/tr/news/aws-continuum-fresh-cve-benchmark-audited-results-2026"},{"api_url":"https://newsverum.com/api/v1/articles/aws-continuum-fresh-cve-benchmark-audited-results-2026?lang=en","language":"en","url":"https://newsverum.com/en/news/aws-continuum-fresh-cve-benchmark-audited-results-2026"},{"api_url":"https://newsverum.com/api/v1/articles/aws-continuum-fresh-cve-benchmark-audited-results-2026?lang=ar","language":"ar","url":"https://newsverum.com/ar/news/aws-continuum-fresh-cve-benchmark-audited-results-2026"},{"api_url":"https://newsverum.com/api/v1/articles/aws-continuum-fresh-cve-benchmark-audited-results-2026?lang=fr","language":"fr","url":"https://newsverum.com/fr/news/aws-continuum-fresh-cve-benchmark-audited-results-2026"},{"api_url":"https://newsverum.com/api/v1/articles/aws-continuum-fresh-cve-benchmark-audited-results-2026?lang=es","language":"es","url":"https://newsverum.com/es/news/aws-continuum-fresh-cve-benchmark-audited-results-2026"},{"api_url":"https://newsverum.com/api/v1/articles/aws-continuum-fresh-cve-benchmark-audited-results-2026?lang=de","language":"de","url":"https://newsverum.com/de/news/aws-continuum-fresh-cve-benchmark-audited-results-2026"},{"api_url":"https://newsverum.com/api/v1/articles/aws-continuum-fresh-cve-benchmark-audited-results-2026?lang=pt","language":"pt","url":"https://newsverum.com/pt/news/aws-continuum-fresh-cve-benchmark-audited-results-2026"}],"url":"https://newsverum.com/en/news/aws-continuum-fresh-cve-benchmark-audited-results-2026"},"version":"1"}