Google introduces its latest product, Google Threat Intelligence, merging the expertise of its cybersecurity unit Mandiant and threat intelligence platform VirusTotal with the Gemini AI model.

(Photo: Michael M. Santiago/Getty Images)

Google's New Cybersecurity Solution

In an effort to bolster cybersecurity measures, Google has unveiled its newest offering, Google Threat Intelligence. This innovative product integrates the extensive knowledge and capabilities of two established entities within the cybersecurity realm: Mandiant, Google's cybersecurity division, and VirusTotal, a leading threat intelligence platform. 

By combining these resources with the advanced capabilities of the Gemini AI model, Google aims to provide a comprehensive and effective solution to combat cyber threats.

As the landscape of AI applications evolves, there is a growing emphasis on leveraging its potential for practical purposes beyond mere image manipulation. Recognizing this trend, Google has redirected its focus towards cybersecurity, acknowledging the critical importance of safeguarding digital assets in today's interconnected world. 

The primary objective of Google Threat Intelligence is to simplify the complexities associated with threat reports, rendering them more accessible and easily understandable for users across various sectors.

Enhancing Cybersecurity Capabilities Through AI

Google's new product relies on the Gemini 1.5 Pro large language model to speed up the process of understanding malware attacks.

Released in February, this model took just 34 seconds to analyze the WannaCry virus code from 2017, a notorious ransomware attack. It quickly identified a kill switch, demonstrating its ability to read and write code effectively.

Within the realm of cybersecurity, Gemini offers a novel application: condensing threat reports into plain language within Threat Intelligence.

This feature enables companies to evaluate the potential impact of looming attacks accurately. In essence, it prevents companies from overestimating or underestimating threats' severity.

According to Google, Threat Intelligence boasts an extensive information network for preemptive threat monitoring. This feature allows users to gain comprehensive insights into cybersecurity, facilitating effective prioritization of security measures. 

Additionally, Mandiant contributes human expertise, with professionals dedicated to monitoring suspicious groups and consultants aiding in attack prevention for companies. Meanwhile, VirusTotal's community continually shares threat indicators, further enhancing the platform's threat detection capabilities.

Also read: Google Brings AI-Enhanced Security Tools in SecOps for Enhanced Cyber Threat Management

In 2022, Google acquired Mandiant, the cybersecurity firm known for uncovering the SolarWinds cyber attack against the US federal government in 2020. Additionally, Google plans to use Mandiant's expertise to assess security risks in AI projects. 

Mandiant will examine the strength of AI models as part of Google's Secure AI Framework and help simulate potential cyberattacks. While AI models are valuable for analyzing threats and detecting malware, they can also be targeted by malicious actors. 

One such threat is "data poisoning," where harmful code is inserted into the data used by AI models, preventing them from responding accurately.

Related Article: Google is Acquiring Security Firm Mandiant to Expand its Security