What happened
AWS has expanded Security Hub with a Network Scanning capability that actively probes environments from the public internet to determine which resources are genuinely reachable — going beyond passive analysis of security group rules and routing tables. The feature surfaces exposed public IP addresses, virtual machines, and load balancers that operators may not have known were accessible. Separately, Cloudflare Research unveiled Meerkat, an experimental global consensus service built on a novel algorithm called QuePaxa, intended to underpin a strongly consistent, fault-tolerant key-value store and related distributed applications.
Why it matters for your business
Network misconfiguration remains one of the most common causes of cloud data exposure, and Security Hub's active scanning approach closes a meaningful gap: a resource can appear locked down on paper while remaining reachable in practice due to overlapping rules or infrastructure changes. Security and operations teams can now receive evidence-based findings rather than theoretical risk assessments, enabling faster, more confident remediation decisions. On the Cloudflare side, Meerkat is still experimental, but its ambition — a globally distributed consensus layer with strong consistency guarantees — matters to any organization running multi-region workloads where coordination latency or split-brain failures carry real cost. Teams building on Cloudflare's platform should monitor Meerkat's progress as a potential primitive for distributed locking, configuration management, or transactional workflows.
What to watch next
For AWS customers, the key question is how Network Scanning integrates with existing Security Hub findings workflows and whether it will extend to container and serverless surfaces over time. For Cloudflare's Meerkat, the research team has signaled plans to build production applications on top of QuePaxa, making the first real-world deployments a meaningful test of whether the algorithm holds up under global internet conditions. Broader industry attention will likely focus on whether active probing becomes a standard expectation in cloud security posture management tools across providers.