Amazon AI Causes AWS Outage, NVIDIA AI PC Chips, CISA 3‑Day Dell Patch, Password Manager Hacks

On this episode of Zero Downtime, John and Logan dig into what happens when automation gets too much access. An internal Amazon AI agent was configured to “fix unused resources” and had the ability to terminate EC2 instances, delete S3 buckets, and modify IAM roles. It misread production state and started deleting critical infrastructure. Not malicious. Not hacked. Just overly trusted automation and a blast radius problem.

They also cover NVIDIA’s AI PC strategy and why it is not a traditional “CPU comeback.” The focus is AI-enabled laptops, with partnership paths that include Arm-based designs (via MediaTek) and deeper integration in the Intel Windows ecosystem. The big question is what it takes to make Windows laptops feel competitive again in a world shaped by Apple’s M-series approach.

CISA then ramps up the urgency with a Binding Operational Directive requiring federal agencies to patch within three days. The vulnerability is CVE-2026-22769, affecting Dell RecoverPoint for Virtual Machines in VMware environments, driven by hardcoded credentials and enabling remote takeover with no authentication. Researchers report exploitation in the wild going back to at least mid-2024, with attackers using the access for lateral movement, persistence, and sophisticated malware deployment.

Finally, they break down password manager risks that rarely get discussed. Even with strong encryption, a compromised provider server can enable vault tampering, credential injection or replacement, downgrade-style attacks, risky recovery flows, and metadata leakage. The takeaway is not “encryption is broken.” The takeaway is that real-world security assumptions about server behavior matter.

Topics covered:

• Amazon AI causes an AWS outage by deleting “unused” resources
• NVIDIA reenters consumer PCs with AI-focused laptop chips
• Zelda turns 40 and why it changed game design
• CISA 3-day patch mandate for an actively exploited Dell bug (CVE-2026-22769)
• Password manager hacks and “zero-knowledge” trust boundaries
• Story: the ROSAT satellite hack

Zero Downtime is a weekly conversation about reliability, cybersecurity, privacy, and real-world tech decisions that impact businesses and everyday users.