AWS now lets you pick hybrid ML-KEM key-exchange groups on Aurora PostgreSQL 18 through the ssl_groups parameter, with no reboot. Turn it on for databases holding long-lived data to neutralize harvest-now-decrypt-later collection.
On October 27, 2026, AWS raised Amazon Aurora serverless to a 384 ACU ceiling for PostgreSQL — 768 GiB of memory and 50 percent more capacity — while keeping scale-down to zero. For the bursty workloads of AI agents, this is the clearest signal yet that AWS wants the serverless database to be the default backplane, provided you treat the ACU ceiling as a real capacity decision.
PostgreSQL 19, expected in late September 2026, will not ship until around November 19: AI-assisted code review surfaced roughly forty defects the committers could not absorb in time, and eight to ten features are being sent back to version 20. If you adopt LLM review mid-release, budget for this revert tax instead of eating it.
On October 8, 2026, AWS extended GuardDuty RDS Protection beyond login anomalies to detect data exfiltration and destruction in Aurora PostgreSQL and RDS for PostgreSQL, using agentless behavioral baselines. Turn on the 30-day free trial if you run PostgreSQL — but know that MySQL remains outside the scope.
AWS embeds DuckDB inside Aurora PostgreSQL to query operational data and the data lake in a single query, with no ETL pipeline. A turning point for teams that replicated the lake into Postgres.
Present since PostgreSQL 9.4 in 2014, CVE-2026-6471 (CVSS 7.2) lets an account holding the REPLICATION attribute load an arbitrary library through logical decoding and run code as the server’s operating-system user. Fixed on August 13, 2026 via the output_plugin_libraries parameter: update and make sure your output plugins are explicitly allowlisted.
On August 13, 2026, the PostgreSQL project released 18.6, 17.11, 16.15, 15.19, 14.24 and 19 Beta 3, fixing 28 security vulnerabilities — a record — including a dozen memory bugs exploitable for code execution. Apply the minor release now, and if you are still on version 14, plan the major upgrade before November 12, 2026.
