Google to critical infra orgs: Our AI scanners won't be evil, promise
Google and Wiz launch Scan for Good, using Gemini 3.8 Flash Cyber and Red Agent to autonomously find critical vulnerabilities in hospitals, transit, and municipalities.
The initiative pairs Google's bug-hunting model Gemini 3.8 Flash Cyber with Wiz's Red Agent pentesting agent to scan public-facing sites, APIs, and applications of critical infrastructure, public services, and nonprofits, with human researchers validating every finding. Documented results include a critical script-injection flaw in Snowflake's snowflake-connector-net GitHub Actions workflow, fixed the same day it was disclosed. Other findings include an exposed admin key granting access to 8.8 million files at a Middle Eastern archive and a rail operator's leaky database exposing active administrator sessions. CISA endorsed the initiative and provided guidance as the program scales globally.
- Gemini 3.8 Flash Cyber plus Wiz Red Agent hunt exposures in critical infrastructure and nonprofits
- Human researchers validate all findings and make disclosure decisions
- Found critical GitHub Actions script injection in Snowflake's snowflake-connector-net repository
- Uncovered exposed admin key over 8.8 million files and leaky rail operator database
- CISA endorsed the initiative, which scales globally with no set end date
- AI models
- Gemini 3.8 Flash Cyber
From the original article
3 min read at theregister.comGemini 3. 8 Flash Cyber and Wiz's Red Agent team up to protect hospitals, public transit, and tech
By Jessica Lyons · theregister.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.