Google Cloud launched a new cybersecurity product on Monday that offers a significant advancement by automating threat intelligence and making it more actionable.
The new Google Threat Intelligence solution, unveiled at the RSA Conference 2024, provides security professionals with speedier threat protection as well as a streamlined user experience.
Google Threat Intelligence stands out in the crowded threat intel space by combining expertise and insights from Gemini’s advanced AI capabilities, Mandiant and virustotal.
The combination of capabilities from many sources within Google Cloud has enabled the newly unified threat intelligence service
Mandiant, a well known threat intelligence firm for incident response performs more than 1,100 cyber incident investigations every year. Google acquired Mandiant back in 2022. The company plans to leverage Mandiants expertise to assess security vulnerabilities around AI projects.
The new offering also leverages VirusTotal, a crowdsourced malware database that Google owns for a decade now and has over 1 million users.
Dave Gruber, principal analyst, Enterprise Strategy Group said, “While there is no shortage of threat intelligence available, the challenge for most is to contextualize and operationalize intelligence relevant to their specific organization.”
He further added, “Unarguably, Google provides two of the most important pillars of threat intelligence in the industry today with VirusTotal and Mandiant. Integrating both into a single offering, enhanced with AI and Google threat insights, offers security teams a new means to operationalize actionable threat intelligence to better protect their organizations.”
Of course, the new Threat Intelligence product uses data from Google itself, including 1.5 billion Gmail accounts and 4 billion devices covered by the company.
Google Threat Intelligence can significantly increase threat correlation by integrating and analyzing these three enormous data sources.
According to Google Cloud, one of the main benefits of the new Google Threat Intelligence product is that it uses generative AI to give security experts faster insights.
The product specifically makes use of Google’s Gemini AI technology, which includes the April-launched Gemini 1.5 Pro service.
Security experts can quickly condense and analyze enormous data volumes using Gemini, and it also lets them harvest open-source intelligence from the internet.
Google Threat Intelligence can be licensed as a standalone offering though it’s also deeply integrated into the Google Security Operations platform.
As part of Google SecOps, the new Google Threat Intelligence offering will enable use cases such as automated threat hunting.
Google is not the only big tech to use AI models in cybersecurity. Previously, Microsoft released Copilot for security, which leverages the GPT-4 paradigm to answer threat-related queries
