Welcome to episode 341 of The Cloud Pod, where the forecast is always cloudy! Matt & Ryan are picking up Justin’s slack this week while he’s traveling for work, but don’t worry, because they have plenty of news! We’re talking about those mass layoffs over at AWS, a major security breach over at Notepad++, and some new slight of hand over at Elon’s companies. There’s a lot to cover, so let’s get into it!

Titles we almost went with this week

Finally, a Chatbot That Actually Knows Where Your Data Lives **Anthropic
Microsoft Adds Security Analyzer to MSSQL Extension: Because Bobby Tables Jokes Are Only Funny Until They Happen to You
From Sequential Sadness to Parallel Paradise: GKE Node Pools Get Concurrent
From Vibe Coding to Production: AWS MCP Server Gets SOPs
One Prompt to Deploy Them All: AWS MCP Server Automates Infrastructure
AWS Layoffs: Scaling Down Instead of Scaling Out
Mutual TLS: Because CloudFront and Your Origin Need Couples Therapy
Claude Team Plan: Now With More Seats and Less Bills
From Snowflake to Snowball: Rolling Data and Dev Into One Platform
From Notepad++ to Notepad Pwned: A Six-Month Hosting Horror Story
EventBridge Payload Capacity Gets a 4x Upgrade: No More Event Splitting Headaches
CloudFront Finally Learns to Check ID Before Knocking on Origin’s Door

General News

01:30 SpaceX acquires xAI, plans to launch a massive satellite constellation to power it – Ars Technica

SpaceX has acquired xAI to create a vertically integrated AI and space infrastructure company, with plans to deploy up to 1 million satellites as orbital data centers.
This represents a significant bet that space-based compute infrastructure can be cost-competitive with traditional ground-based data centers for AI workloads.
The merger combines SpaceX’s launch capabilities and satellite manufacturing expertise with xAI’s Grok chatbot and X social platform.
The strategy assumes AI demand will continue to grow and that compute capacity, rather than other factors, is the primary bottleneck to AI adoption.
The orbital data center concept raises questions about latency, power requirements, thermal management, and maintenance compared to terrestrial facilities.
Traditional cloud providers have invested heavily in ground-based infrastructure optimized for these factors.
This consolidation of Musk’s companies creates potential conflicts between SpaceX’s established government and commercial contracts and xAI’s more controversial products.
The integration of a proven aerospace company with a newer AI venture introduces execution risk to SpaceX’s core business.
The plan depends on several unproven assumptions, including sustained AI market growth, viable economics for space-based computing, and the ability to manufacture and launch satellites at unprecedented scale.
Cloud providers and enterprises will need to evaluate whether orbital compute offers advantages over existing multi-region terrestrial deployments.

03:22 Ryan – “I feel like this is a shell game con; taxes are over here – no, now they’re over here!”

06:49 Notepad++ Hijacked by State-Sponsored Hackers | Notepad++

Chinese state-sponsored hackers compromised Notepad++ update infrastructure from June through December 2025 by exploiting vulnerabilities at the shared hosting provider level, not in Notepad++ code itself.
The attackers maintained access to internal service credentials even after losing server access in September, allowing them to selectively redirect update traffic to malicious servers until December 2025.
The attack exploited insufficient update verification controls in older Notepad++ versions, with attackers specifically targeting the update manifest endpoint to serve compromised installers to selected users.
Version 8.8.9 added certificate and signature verification for downloaded installers, while the upcoming version 8.9.2 will enforce XMLDSig signature verification on update server responses.
The hosting provider confirmed the compromise was limited to one shared hosting server and found no evidence of other clients being targeted, though the investigation of 400GB of logs yielded no concrete indicators of compromise like binary hashes or IP addresses. Rapid7 and Kaspersky later published a more detailed technical analysis with actual IoCs.
This incident demonstrates supply chain attack risks even for open source software with millions of users, particularly when update infrastructure relies on shared hosting environments.
The Notepad++ project has since migrated to a new hosting provider with stronger security practices and implemented multiple layers of cryptographic verification.

09:24 Matt – “Getting in at this level – and that maintenance of control for 7 months – is crazy. It’s a pretty big attack.”

15:25 Internal Messages Reveal Teams, Jobs Affected in Amazon Layoffs – Business Insider

Amazon is cutting 16,000 corporate roles in its second major layoff round within four months, affecting multiple AWS service teams, including Bedrock AI, Redshift data warehouse, and ProServe consulting divisions.
- The cuts represent a significant restructuring of Amazon’s corporate workforce of approximately 350,000 employees.
AWS engineering teams appear heavily impacted based on internal Slack messages, with software engineers from core cloud services posting job searches.
This raises questions about AWS’s product development velocity and customer support capacity during a period of intense AI competition with Microsoft Azure and Google Cloud.
Affected US employees receive 90 days for internal job searches with severance and benefits for those unable to find new positions.
The timing follows Amazon’s return-to-office mandate and broader tech industry cost-cutting trends.
The layoffs touch customer-facing teams like Prime subscription services and last-mile delivery alongside cloud infrastructure groups. This dual impact on retail and AWS operations suggests company-wide efficiency initiatives rather than targeted underperformance in specific business units.

17:24 Matt – “It really did affect a broad spectrum of the org.”

AI Is Going Great – Or How ML Makes Money

19:10 Project Genie: AI world model now available for Ultra users in U.S.

Google DeepMind launches Project Genie, an experimental web app now available to Google AI Ultra subscribers in the U.S. (18+), powered by the Genie 3 world model that generates interactive 3D environments in real-time based on text prompts and images.
- Unlike static 3D snapshots,

341: AWS Layoffs: Scaling Down Instead of Scaling Out