All news with #google cloud tag

⚠️ The Cloud Threat Horizons report from Google Cloud's Office of the CISO warns that AI-assisted exploitation has compressed the window from vulnerability disclosure to active attacks from weeks to days. In H2 2025, third-party software flaws became the leading initial access vector, surpassing weak credentials. The report urges automated defenses, identity-based controls, and tamper-resistant logging to improve forensic readiness.

🔐 Google Cloud's H1 2026 Threat Horizons Report finds that in the second half of 2025 threat actors shifted from credential-based access to exploiting unpatched third-party software. Third-party software entry rose to 44.5% of primary vectors (up from 2.9%), while credential abuse declined to 27.2%. Google highlights React2Shell (CVE-2025-55182) as a heavily exploited RCE and recommends automated defenses, stronger identity controls and WAF protections to mitigate rapid post-disclosure attacks.

🔒 Cybersecurity researchers disclosed nine cross-tenant vulnerabilities in Google Looker Studio that could have allowed attackers to execute arbitrary SQL and exfiltrate data across Google Cloud projects. Tenable has labeled the set of flaws LeakyLooker; there is no evidence of active exploitation and Google patched the issues after responsible disclosure in June 2025. Affected connectors include BigQuery, Spanner, Google Sheets, PostgreSQL, MySQL and many JDBC-based sources, and several bugs could retain stored credentials or enable one-click data exfiltration via crafted reports.

🎮 Sony Interactive rebuilt its global Entitlements service on Google Cloud Spanner, migrating from Apache Cassandra and Oracle to a single, strongly consistent distributed SQL datastore. They normalized the schema, co‑located each player's entitlements with their account, eliminated a 500+ TB redundant search index, and reduced per‑player storage from ~3 MB to 0.12 MB. The live migration completed with zero downtime and delivered ~91% storage reduction, ~48% cost savings, and immediate cross‑region visibility via Spanner's TrueTime and geo‑partitioning. Engineers now maintain a simpler stack and can scale regionally to hundreds of nodes without rework.

💡 This post shows how to combine GKE Autopilot GPU time-sharing with vCluster to host isolated Ollama instances serving open models on shared GPU nodes. It outlines steps to provision Autopilot, create virtual clusters, deploy Ollama with GPU-sharing labels, and pull models for verification. The approach reduces GPU underutilization and simplifies multi-tenant operations. Teams keep isolated control planes while sharing hardware, lowering costs and operational overhead.

🔒 Google Cloud published a recommended security checklist based on Minimum Viable Secure Product principles, offering 60 curated controls across six domains to help organizations harden cloud environments. The tiered Basic, Intermediate, and Advanced guidance is designed to be simple and scalable. It’s also automatable via a companion Terraform repository and positioned as AI-ready to support adoption of agentic AI. Early customers reported the checklist enabled rapid activation of critical controls and hardened baselines in a single session.

🚗 BMW Group and Google Cloud present a proof-of-concept pipeline to compress, fine-tune, evaluate, and deploy domain-specific small language models (SLMs) for in-vehicle voice commands. They position SLMs as a practical compromise between full cloud-based LLMs and constrained onboard hardware, reducing latency and network dependence. Using Vertex AI Pipelines, the automated workflow explores quantization, pruning, distillation, LoRA fine-tuning, and RL-based alignment, and validates models on Android/AOSP head-unit environments. The team publishes the pipeline code to encourage reuse and reproducible experimentation.

🚀 H4D VMs are now generally available on Google Cloud, powered by 5th Gen AMD EPYC processors and featuring Cloud RDMA on the Titanium network adapter. They deliver substantial throughput and scaling gains across HPC domains—healthcare, manufacturing, EDA and weather—while supporting Slurm and GKE orchestration, Cluster Toolkit, Google Cloud Batch and DWS consumption models. Google cites multi-node benchmark speedups up to 5.8× and access to compute as low as $0.03 per core‑hour.

🔧 Google Cloud is extending its Autonomous Network Operations framework with the Gemini-powered Autonomous Data Steward and a Core Network VoLTE Agent, developed with Future Connections and piloted by One NZ. The Steward provides a zero-copy data layer using Dataplex Universal Catalog to expose metadata pointers and give agents access to real-time telemetry without duplicating datasets. The VoLTE Agent leverages that foundation for continuous monitoring, intelligent root-cause analysis of signaling and probe data, and autonomous recommendations to improve voice quality and accelerate operational tasks.

🔗 Google Cloud describes using graph-based digital twins and GraphML to enable autonomous telecommunications networks that self-configure, self-optimize, self-heal and self-secure with minimal human intervention. The post outlines an integrated stack combining tf-GNN and NetAI's fine-tuned GNNs to model live topology and dependencies as input for deterministic root-cause analysis. A MasOrange PoC at MWC 2026 showcases managed AIOps driven by these models.

🚀 Google Cloud demonstrates how Google Kubernetes Engine (GKE) can form a high-performance foundation for telco modernization via two complementary paths: cloud-centric evolution for full cloud migration and strategic hybrid modernization to retain local control over latency-sensitive functions. The post highlights carrier-grade enhancements—multi-networking API, simulated L2, a telco CNI, persistent IP, and GKE IP route—with sub-second convergence and HA Policy to minimize downtime. It frames modernization as a means to enable predictive AIOps, intent-driven automation, faster time-to-market, and new monetization opportunities through AI and data platforms.

📡 Google Cloud and DigitalRoute are delivering reusable, cloud-native data pipelines that turn diverse telecom telemetry into AI-ready datasets. Running DigitalRoute’s Usage Engine Private Edition on GKE, the solution normalizes proprietary formats at edge and core, filters noise, and routes data into Spanner for real-time digital twins and BigQuery for large-scale analytics and training with Vertex AI. The result is consistent, contextualized subscriber traces that accelerate production-grade autonomous network use cases.

🧭 This post launches Google Cloud's "Data Strategy = AI Strategy" series and reframes the database as the central context engine for production AI. It argues that by using fully PostgreSQL-compatible services such as AlloyDB and Cloud SQL, teams can eliminate latency and improve retrieval accuracy while reducing infrastructure friction. The article emphasizes three enterprise pillars — speed, scale, and security — and describes hands-on labs that cover batch embeddings, real-time inference with Gemini 3 Flash, and row-level security for zero-trust agents.

🚀 Google Cloud and Nokia announced an integration at MWC Barcelona that connects Nokia Network as Code (NaC) with Google Cloud’s agentic AI stack to enable AI agents to observe, program, and optimize mobile networks autonomously. The collaboration leverages Gemini models and standardized protocols such as A2A and MCP to translate natural-language intent into network actions. An Agent Development Kit (ADK) allows enterprises to build custom multi-agent workflows that bridge business logic and network intelligence, delivering a zero-code, intent-driven developer experience.

🔒 This Google Cloud blog outlines a reference architecture to deliver private-IP only connectivity for retrieval-augmented generation (RAG) applications that must not transit the public internet. It describes a multi-project topology—routing project, Shared VPC host, and service projects for Data Ingestion, Serving, and Frontend—and maps required services such as Cloud Interconnect/Cloud VPN, Network Connectivity Center, Private Service Connect, Cloud Router, Cloud Armor, and VPC Service Controls. The post also details RAG population and inference flows to show end-to-end private traffic paths and highlights management and routing orchestration for hybrid and VPC spokes.

🚀 At MWC Barcelona, Google Cloud outlines a shift from AI-driven insights to agentic telco operations, showcasing tools that embed AI into network control to achieve Level 4–5 autonomy. The company highlights a dynamic network digital twin, a unified graph data layer using Spanner Graph and BigQuery, and real-time GNN predictions in Vertex AI. New open-source telco data pipelines and two proof-of-value agents — a data steward and autonomous network agents — aim to accelerate trials and reduce legacy bottlenecks.

🔒 Eventarc Advanced is Google Cloud’s serverless eventing platform that separates centralized governance from distributed processing to balance SecOps control with developer autonomy. The platform uses a managed bus to enforce IAM, content-based access control, VPC Service Controls and required metadata while team-owned pipelines perform schema-aware transforms, format conversion, retries and destination auth. Generally available in August 2025, it addresses historical ESB and EDA governance gaps by combining fine-grained policy with team-level integration logic.

🧠 This article describes a polyglot storage pattern on Google Cloud to preserve conversational continuity for scaled chatbots. It recommends Memorystore for Redis for sub‑millisecond short‑term context, Cloud Bigtable as a petabyte‑scale mid‑term system of record, and BigQuery for long‑term archival and analytics. The design delegates unstructured artifacts to Cloud Storage and uses an async pipeline to balance low latency and durable persistence. Practical configuration and migration pointers help teams implement responsive, analyzable agent memory.

🛡️ Google Threat Intelligence Group, Mandiant, and partners executed a coordinated disruption against a global espionage campaign attributed to UNC2814 that abused cloud services for covert command and control. Investigators identified a novel C-based backdoor called GRIDTIDE that uses Google Sheets APIs as a high-availability C2 channel, protected by an AES-128-CBC key and service account credentials. Actions included terminating attacker-controlled Google Cloud projects, disabling accounts and Sheets API access, sinkholing infrastructure, and publishing IOCs and detection guidance to support defenders.

🔌 Google Cloud now offers managed MCP servers for databases and developer tooling, enabling MCP-compliant AI agents (including Gemini) to access data and infrastructure without deploying additional infrastructure. The expansion adds AlloyDB for PostgreSQL, Spanner, Cloud SQL, Bigtable and Firestore, plus a Developer Knowledge MCP server for IDE documentation access. These servers use IAM-based authentication and Cloud Audit Logs for observability and governance, letting teams scale agentic workloads securely.