Google has introduced a new cybersecurity tool called Google Threat Intelligence. This product aims to address the challenge of understanding and acting on threats effectively. It combines Mandiant’s expertise, VirusTotal’s community, and Google’s vast visibility, using an AI agent called Gemini to speed up threat response.
Dave Gruber, Principal Analyst at Enterprise Strategy Group, highlights the importance of contextualizing threat intelligence for specific organizations. He praises Google’s integration of Mandiant and VirusTotal, along with AI and Google’s insights, as a significant advancement for security teams.
Google Threat Intelligence offers unprecedented visibility into global threats by leveraging Mandiant’s incident response and research, Google’s user and device data, and VirusTotal’s malware database. With four billion protected devices, 100 million blocked phishing attempts daily, and defense of 1.5 billion email accounts, Google’s reach is extensive.
Mandiant’s expert consultants monitor threat actor groups globally, conducting over 1,100 investigations annually to defend against sophisticated threats. VirusTotal’s large community contributes potential threat indicators, enriching Google’s threat intelligence.
The innovative aspect of Google Threat Intelligence lies in its AI-driven approach, which streamlines threat analysis and response. Gemini 1.5 Pro simplifies the reverse engineering of malware, significantly reducing analysis time. For instance, it analyzed the WannaCry malware code in just 34 seconds.
Google Threat Intelligence is part of Google Cloud Security’s comprehensive portfolio, which includes Google Security Operations, Mandiant Consulting, Security Command Center Enterprise, and Chrome Enterprise. These offerings empower organizations to tackle security challenges using Google’s industry-leading capabilities.