Google unveils security suite, promising enhanced cloud visibility

The goal is to organize diverse security information into a single web portal where enterprise security administrators can view everything at once, the company said.

Google Cloud users now will have more insight into what assets are connected to the platform and which ones present the most risk, the company says.

The Cloud Security Command Center (SCC) is in beta mode and ready for use for Google Cloud users, the company said Wednesday, eight months after the tool was introduced. Google’s cloud business accounts for about $1 billion in revenue per quarter, it said earlier this year.

The SCC inventories business data, identifies potential threats, remediates security issues and expands existing notification services, the company said. The goal is to organize diverse security information into a single web portal where enterprise security administrators can view everything at once.

“If you’re building applications or deploying infrastructure in the cloud, you need a central place to unify asset, vulnerability and threat data in their business context to help understand your security posture and act on changes,” Andy Chang, senior product manager for Google Cloud, said in a blog post.

Google’s SCC also aims to help large organizations better understand where their cloud infrastructure, apps and data repositories are located. Those features could help firms avoid data breaches later blamed on misconfigured cloud services, Wired reported when SCC entered alpha testing. The new service organizes all assets that are publicly accessible into a single dashboard.

The beta release also comes with the services Cloud Datastore, Cloud DNS, Cloud Load Balancing, Cloud Spanner, Container Registry, Kubernetes Engine and Virtual Private Cloud.

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• Jail time for Maine child in 764 marks turning point in federal law enforcement

Technology

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

• The Collective Cyber Defense letter wrote your next vendor questionnaire

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure

• Election official says Tina Peters would be consultant, won’t have access to election systems