Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts
threats has a flaw rated critical, which elevates the need for a fix from the to-do list to an immediate priority.
threats has a flaw rated critical -- the kind of severity that moves a fix from the to-do list to today's priority.
This requires local or already-authenticated access to reach.
Google Cloud is adding new controls to CodeMender , its AI tool for finding and fixing software vulnerabilities, allowing businesses to isolate attack simulations and target code scans more precisely.
Our early evaluation of CodeMender shows the potential to reduce vulnerability discovery time by over 95%, while keeping expert validation and remediation under human oversight, said Ivan Fontarensky , CTO Cybersecurity Services, Thales Group.
Google Cloud is extending common security and governance controls across environments where AI agents run, including its Gemini platform, Google Kubernetes Engine (GKE), Cloud Run, and the new Agent Compute Engine.
A new Model Armor custom topic detector, also in preview, lets businesses define prompt-based rules to identify whether agent conversations stay within approved topics.
Anyone running threats is exposed, specifically wherever threats is actually deployed rather than just licensed or installed somewhere unused.
The updates let businesses verify vulnerabilities and simulate exploits in an operating system-level sandbox or an isolated virtual machine.
Businesses can scan an entire code repository, a specific folder, or only files modified since the last scan, giving them more control over scanning speed and costs.
What an attacker actually gains: the advisory describes a real security impact once the vulnerable path is reached.
Google and Wiz are combining their security tools to help organizations identify and address risks across code, applications, and multicloud infrastructure.
Wiz discovers and maps autonomous applications, agents, and infrastructure, analyzing applications’ purpose, capabilities, and permissions to uncover hidden risks.
They also add human checks for local writes and command execution to help keep testing within defined limits.
The controls are designed to help businesses manage agent credentials, protect company data, and detect threats across cloud environments.
Auth Manager, now generally available, centralizes credential management in a Google-managed vault governed by IAM, and handles authorization flows and refreshes user-delegated tokens.
Agent Identity JWT support, available in preview, lets agents authenticate across services including AWS, Azure, on-premises backends, and Model Context Protocol (MCP) servers without relying on static, long-lived API keys.
VPC Service Controls ingress and egress rules now support IAM roles, generally available, and Workload Identity Federation for GKE, available in preview.
The network security updates include the generally available Cloud NGFW advanced malware sandbox, powered by Palo Alto Networks WildFire.
Confirm whether threats is present anywhere in your asset and software inventory.
No exploitation has been reported yet, but that status can change, so keep watching vendor guidance while you remediate.
The company is making Cloud NGFW project-level resources generally available and introducing Cloud Armor managed rules in preview, using threat intelligence from Thales Imperva to help protect applications against exploits.
What happened
threats has a flaw rated critical, which elevates the need for a fix from the to-do list to an immediate priority.
This flaw requires local or already-authenticated access to be exploited.
Google Cloud is implementing new controls in CodeMender, its AI tool for identifying and rectifying software vulnerabilities, enabling businesses to isolate attack simulations and conduct more targeted code scans.
What changed
An initial evaluation of CodeMender suggests it can reduce vulnerability discovery time by over 95%, while maintaining expert validation and remediation under human oversight, according to Ivan Fontarensky, CTO Cybersecurity Services at Thales Group.
Google Cloud is broadening security and governance controls across environments where AI agents operate, including its Gemini platform, Google Kubernetes Engine (GKE), Cloud Run, and the new Agent Compute Engine.
A new Model Armor custom topic detector, currently in preview, allows businesses to establish prompt-based rules to ensure agent conversations remain within approved topics.
Who is affected
Anyone operating threats is at risk, particularly in environments where threats is actively deployed rather than merely licensed or installed but unused.
The updates enable businesses to validate vulnerabilities and simulate exploits in an operating system-level sandbox or an isolated virtual machine.
Businesses can scan an entire code repository, a specific folder, or only files modified since the last scan, enhancing their control over scanning speed and costs.
Why it matters
The advisory outlines the tangible security impact an attacker could achieve once the vulnerable path is exploited.
Google and Wiz are collaborating to merge their security tools, assisting organizations in identifying and mitigating risks across code, applications, and multicloud infrastructure.
Wiz maps and discovers autonomous applications, agents, and infrastructure, analyzing their purpose, capabilities, and permissions to reveal hidden risks.
Technical details
The controls incorporate human checks for local writes and command execution to maintain testing within defined limits.
These measures are aimed at helping businesses manage agent credentials, safeguard company data, and detect threats across cloud environments.
Auth Manager, now generally available, centralizes credential management in a Google-managed vault governed by IAM and oversees authorization flows and refreshes of user-delegated tokens.
Response
Agent Identity JWT support, currently in preview, enables agents to authenticate across services such as AWS, Azure, on-premises backends, and Model Context Protocol (MCP) servers without depending on static, long-lived API keys.
VPC Service Controls ingress and egress rules now support IAM roles, which are generally available, along with Workload Identity Federation for GKE, also in preview.
The network security updates feature the generally available Cloud NGFW advanced malware sandbox, powered by Palo Alto Networks WildFire.
What security teams should do
Verify if threats is present in your asset and software inventory.
No exploitation has been reported yet, but this status may change, so continue monitoring vendor guidance while you work on remediation.
The company is making Cloud NGFW project-level resources generally available and introducing Cloud Armor managed rules in preview, leveraging threat intelligence from Thales Imperva to help shield applications from exploits.