ZeroHour
Vendor

Google Cloud

3 mentions in 7 days · 8 in 30 days · 9 total · first seen · last

Timeline

A new open standard locks AI weights to approved hardware

OPAQUE releases Weight Custody Manifest, an open standard keeping AI model weights encrypted until receiving hardware cryptographically attests to builder-specified conditions.

OPAQUE, a confidential computing company, released the Weight Custody Manifest (WCM) standard as a developer-preview specification with a Python SDK and a public test suite of 91 cases. WCM keeps model weights encrypted until the receiving infrastructure proves via CPU/GPU attestation that it matches builder-signed conditions, and decryption access can be revoked later if conditions change. OPAQUE says it ran the attestation exchange on an NVIDIA H100 and on AMD and Intel confidential servers hosted on Azure and Google Cloud, with two independent SDK builds producing identical output across 5,948 files. The public quickstart only exercises protocol logic on synthetic evidence and skips GPU cryptographic verification, and the standard cannot distinguish an authorized key from one physically extracted from hardware.

Help Net Security · 5d agoAI safety & security

Deepmind's AlphaGenome Atlas maps every possible DNA change in the human genome

DeepMind's AlphaGenome Atlas precomputes impact predictions for ~9 billion human DNA variants in a 1-petabyte dataset; its AVI score beats CADD in benchmarks

Google DeepMind released the AlphaGenome Atlas, precomputing functional-effect predictions for roughly 9 billion human genome variants (about 27,000 prediction values per variant) in a one-petabyte dataset more than 30 times the size of the AlphaFold database. The accompanying AlphaGenome Variant Impact Score (AVI), a small neural network combining AlphaGenome, AlphaMissense and evolutionary conservation features (18 inputs versus CADD's 150+), outperformed existing tools on clinically classified variants, ranking causal variants in the top 50 candidates for 29.5% of solved GREGoR cases versus 12.5% for CADD. A GREGoR epilepsy case illustrates the impact: AVI elevated a previously unclear DNM1 splice variant that lab experiments confirmed as likely disease-causing. The atlas is available for noncommercial use via web portal, API and a Google Antigravity skill, with a commercial version planned through Google Cloud.

The Decoderupdated · 6d agofirst · 6d agoAI research 2 sources

Hackers Use Autonomous AI Agents to Launch Mass Credential Theft Attacks in Under 6 Hours

Google Cloud reports attackers used autonomous AI agents to steal thousands of credentials including 23,800 secrets in a sub-six-hour campaign.

Google Cloud threat intelligence observed financially motivated attackers compromising cloud infrastructure and using AI coding agents guided by written playbook files to scan, harvest and rotate credentials within six hours. An exposed C2 dashboard for a framework called Recon organized and validated more than 23,800 stolen secrets, including API keys for cloud and AI services. Related activity includes UNC6780 publishing the trojanized tiktoken_mcp package on PyPI to target CI/CD tokens and the DUSTMAKER stealer hiding in .claude, .vscode and .cursor workspace directories.

Cyber Security Newsupdated · 6d agofirst · 6d agoThreat actor in the wild 2 sources

Google’s Atlas of the human genome could pave the way for new treatments

Google DeepMind launches AlphaGenome Atlas, a catalog of predicted molecular effects for roughly nine billion single-letter DNA changes across the human genome.

Google DeepMind unveiled AlphaGenome Atlas, a roughly 1-petabyte dataset predicting how each of about nine billion possible single-nucleotide variants affects molecular biology, including non-coding regions that regulate gene behavior. It builds on the AlphaGenome model released in 2025 and adds a Variant Impact Score (AVI) to help researchers rank variants. The catalog is available for noncommercial research via a web portal, the Antigravity platform, and the AlphaGenome interface, with commercial access on Google Cloud planned.

The Verge · AI · 7d agoAI industry 2 sources

Proactive cyber defense for governments and enterprises

Google launches the Fairwind Program giving governments and enterprises access to Gemini 3.8 Flash Cyber and CodeMender for autonomous vulnerability finding and patching.

Google DeepMind announced the Fairwind Program, a limited-access offering giving Google Cloud customers, government agencies, and cybersecurity partners access to Gemini 3.8 Flash Cyber and the CodeMender harness to autonomously find, verify, and fix vulnerabilities. Initial access prioritizes governments, critical infrastructure operators in healthcare, telecom, energy, and finance, and core technology platforms, with over 650 partners participating. Google also raised its total global cybersecurity funding commitment above $100 million, including $36 million for 35 US cyber clinics.

Google DeepMind · 13d agoAI industry

Proactive cyber defense for governments and enterprises

Google launches the Fairwind Program giving governments and enterprises access to Gemini 3.8 Flash Cyber and CodeMender for autonomous vulnerability discovery and patching.

Google announced the Fairwind Program, a limited-access offering bringing its cyber defense capabilities to government agencies, critical infrastructure operators, and trusted partners, with more than 650 participating organizations. It combines the Gemini 3.8 Flash Cyber model with the CodeMender harness to autonomously find, verify, and fix vulnerabilities, generating deployment-ready patches in minutes inside customers' cloud environments. Google also raised its total cybersecurity funding commitment above $100 million, including $36 million granted to 35 US cyber clinics supporting hospitals, school districts, and municipal utilities.

Google · AI · 13d agoTools

Vali Cyber ZeroLock 5 brings MFA to the hypervisor command line

Vali Cyber released ZeroLock 5 adding CLI-MFA to protect VMware ESX and Linux hypervisors from insider threats and stolen credentials.

ZeroLock 5 introduces CLI-MFA, requiring time-based one-time passwords for file access, program execution, and network operations at the hypervisor command line on ESX and Linux hosts. The release targets ransomware and nation-state actor pivots to virtualization infrastructure, exemplified by ShinyHunters' shinysp1d3r RaaS platform that encrypts VMware ESX environments using stolen credentials and SSH keys. It adds remotely deployable collectors, reusable multi-site deployment blueprints, SIEM forwarding presets, and support for VCF and ESX 6.7+.

Help Net Security · 14d agoTools

‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

White House launches Watershed 250, a six-month Texas pilot using volunteer vendor cyber and AI tools to harden water utility defenses.

The Office of the National Cyber Director and Texas Cyber Command will oversee the six-month Project Watershed 250 pilot to improve water sector cybersecurity through industry-donated red teaming, system hardening and AI tooling. Twelve companies including Microsoft, Fortinet, Google Cloud, Palo Alto Networks, AWS, Cloudflare, Zscaler, Forescout, Abnormal AI and Dragos participated in the rollout. Officials cited recent attacks including an Iranian-backed campaign against 30 water systems in 12 states and a 2024 incident in Muleshoe, Texas. Some water-security professionals criticized the program as lacking dedicated funding.

CyberScoop · 15d agoPolicy & legal1

Google Cloud Targets 2027 for First Major Post-Quantum Security Milestone

Google Cloud set 2027 for its first major post-quantum cryptography milestone to counter store-now-decrypt-later risks, migrating through 2028.

Google Cloud announced a post-quantum cryptography roadmap targeting its first major security milestone in 2027. The plan aims to mitigate store-now-decrypt-later harvest risks, with wider migration goals extending through 2028. The roadmap affects cryptographic protections for Google Cloud services and customer migration planning timelines.

Infosecurity Magazine · Aug 13, 2026Industry