Google Unveils AI Threat Defense Platform to Fight AI-Powered Cyberattacks

Google Cloud this week announced an always-on autonomous platform designed to protect enterprises from the rising wave of AI-powered cyberattacks. The new Google AI Threat Defense cybersecurity solution leverages AI to identify machine-powered threats faster and stop them before they can do harm. According to Google, the platform continuously prioritizes critical real-world risks and can help organizations implement defenses that predict attack paths and proactively deploy remediation. Google AI Threat Defense combines Mandiant’s frontline and incident response experience with Wiz’s cloud security platform (recently acquired by Google) and Gemini’s reasoning and code remediation capabilities powered by Gemini and CodeMender. “By connecting real-world exposure directly to autonomously creating and prioritizing patching, AI Threat Defense helps organizations actively predict attack paths, prioritize the most significant threats, and deploy verified fixes faster than adversaries can exploit them,” Google says. [Learn More: SecurityWeek to Host AI Risk Summit August 11-12 at the Ritz-Carlton, Half Moon Bay] To match the speed of attackers and help organizations surface weaknesses in their software, AI Threat Defense uses the same four-step framework that the internet giant is relying on to stop threats and transform vulnerability management. It involves mapping the environment for asset visibility, conducting deep-dive assessments and AI-driven posture validation, implementing workflows for fast, autonomous vulnerability remediation, and implementing machine-speed detection and response. The first step, Google says, requires exposure reduction by making sensitive assets unreachable from the internet. Each organization also needs to understand its time to remediation and its ability to prioritize risks, and needs to scan environments using AI to identify exposed APIs, applications, configurations, identities, and permissions. “Traditional attack surface management helps identify what is exposed, but organizations now need an AI penetration tester that can continuously analyze every exposure, determine whether it can actually be exploited, and understand what it would enable an attacker to do before attackers do the same,” the Silicon Valley tech giant says. Deep-dive code analysis and AI-driven adversarial testing and validation, the internet giant says, should focus on internet-accessible applications and services, data flows, authentication mechanisms, and business-critical systems. AI Threat Defense, it says, deploys AI agents designed to find deep vulnerabilities, enriches and validates the findings to uncover dependencies across source code libraries and binaries, and creates actionable response plans to help organizations manage surges in critical issues and roll out AI-generated patches. Just as attackers leverage AI to accelerate their attacks, AI Threat Defense aims to reduce time to remediate to minutes by proactively generating fixes directly in a developer’s IDE or CLI at build time. Each patch is tested, and libraries are tagged across source control and production environments for tracking. “Harnessing the full reasoning power of Gemini, CodeMender works seamlessly with Antigravity and Wiz to empower engineering teams to replace vulnerable code, re-write older code to modern, memory-safe languages, and to analyze library dependencies to coordinate seamless rollouts. In parallel, it automates triage and prioritizes remediation across applications and cloud infrastructure,” Google says. Finally, Google says, AI Threat Defense was also designed to implement machine-speed detection and real-time defense, defining ownership and tracking outcomes, establishing a consistent operational framework to help customers fight AI with AI. Related: UK Cyberspying Chief Calls AI ‘an Unstoppable Force’ and Warns About Russia Related: RevEng.AI Raises $15 Million to Hunt for Flaws and Backdoors in Software Binaries Related: ‘SymJack’ Attack Turns AI Coding Agents Into Supply Chain Attack Delivery Systems Related: Caught Off Guard: Securing AI After It Hits Production WRITTEN BY Ionut Arghire Ionut Arghire is an international correspondent for SecurityWeek. More from Ionut Arghire GlassWorm Botnet Disrupted FBI: Hackers Sending Operatives in Person to Insert USB Drives and Steal Data CISA Urges Immediate Patching of Exploited LiteSpeed cPanel Plugin Zero-Day Iranian APT Targets Aviation, Software Companies With Updated Tools 185,000 Likely Impacted by 7-Eleven Data Breach Hackers Exploited KnowledgeDeliver Zero-Day for Web Shell Deployment Admins of Bulletproof Hosting Service Used by Russian Hackers Arrested in Netherlands 266,000 Affected by Data Breach at Radiology Associates of Richmond Latest News New Edamame Platform Aims to Catch AI Coding Agents Going Off the Rails Gitea Vulnerability Exposed 30,000 Deployments to Attacks Raising the Cybersecurity Stakes: Ante up for the Agentic Era UK Cyberspying Chief Calls AI ‘an Unstoppable Force’ and Warns About Russia Vulnerability in Popular Conference Software Granted Attackers a 100% Talk Acceptance Rate SecurityWeek to Host AI Risk Summit August 11-12 at the Ritz-Carlton, Half Moon Bay RevEng.AI Raises $15 Million to Hunt for Flaws and Backdoors in Software Binaries Romanian Hacker Sentenced to Prison in US for Selling Access to State Network Trending Virtual Event: Threat Detection And Incident Response Summit On-Demand Delve into big-picture strategies to reduce attack surfaces, improve patch management, conduct post-incident forensics, and tools and tricks needed in a modern organization. Register Webinar: Third-Party Risk In Practice June 4, 2026 Organizations are investing heavily in third-party risk management, but breaches, delays, and blind spots continue to persist. Join this live webinar as we examine the gap between how organizations think their third-party risk programs are performing and what’s actually happening in practice. Register People on the Move Joe Chen has become Chief Technology Officer at Trellix. Usercentrics has named Pawan Hegde as COO and Elena Ignatova as CPTO. SecureAuth has named Mark van Oppen as Chief Revenue Officer. More People On The Move Expert Insights Raising The Cybersecurity Stakes: Ante Up For The Agentic Era CISOs are now facing machine-speed attacks and asking, “How do I agent?” The industry must provide remediation at scale. (Nadir Izrael) Caught Off Guard: Securing AI After It Hits Production As enterprises rush AI projects into production, security teams are increasingly being forced into reactive mode. (Joshua Goldfarb) Cyber Resilience Is The New Business Continuity Plan The organizations best prepared to face disruption are those that align security, continuity and risk management around what the business cannot afford to lose. (Steve Durbin) Enhancing Data Center Security Without Sacrificing Performance For AI data centers, where the stakes are the highest and performance constraints are the tightest, security and performance are no longer a zero-sum game. (Nadir Izrael) Is The SOC Obsolete, And We Just Haven’t Admitted It Yet? Many AI-first enterprises have already embraced sovereign architectures for general AI initiatives; cybersecurity—and the SOC—should be next. (Danelle Au) Flipboard Reddit Whatsapp Email