→ 商务部：7月1日起买汽车不必去4S店
百度 为了进入晚间黄金档，节目组在阵容上颇下了一番苦心，除了沙溢、杨烁、姜潮、张大大、张馨予5人组成的明星队，节目另外加入了4位素人组成的达人队。
Insights from Google Cloud security experts on the frontlines, helping organizations reduce risk and feel confident in their ability to detect and respond to threats.
Filter by
Content Types
- Blog posts
- Datasheets
- Events
- Infographics
- Insights
- Podcasts
- Security reports
- Technical guides
- Videos
- Webinars
- Whitepapers
Topics
- BOD Insights
- CISO Insights
- Cloud Security Transformation
- Frontline Intelligence & Expertise
- Security & Identity
- Security Operations
- Threat Intelligence
Featured filters
Threat Intelligence Insights
instant_mixThe latest curated blogs, reports, and insights from Mandiant Frontline Experts.
Security Reports
instant_mixA collection of reports that address key challenges and findings around Threat Intelligence and Expertise, Security Operations, Cloud Security.
- Ongoing SonicWall Secure Mobile Access (SMA) Exploitation Campaign using the OVERSTEP BackdoorJul 2025Google Threat Intelligence Group (GTIG) has identified an ongoing campaign by a suspected financially-motivated threat actor we track as UNC6148, targeting fully patched end-of-life SonicWall Secure Mobile Access (SMA) 100 series appliances.
- Chat with confidence: Unpacking security in Looker Conversational AnalyticsJul 2025he landscape of business intelligence is evolving rapidly, with users expecting greater self-service and natural language capabilities, powered by AI.
- Isolated Recovery Environments: A Critical Layer in Modern Cyber ResilienceJul 2025As adversaries grow faster, stealthier, and more destructive, traditional recovery strategies are increasingly insufficient. Mandiant's M-Trends 2025 report reinforces this shift, highlighting that ransomware operators now routinely target not just production systems but also backups.
- Powering public sector innovation: New networking features in GDC air-gappedJul 2025For organizations with stringent sovereignty and regulatory requirements, Google Distributed Cloud (GDC) air-gapped delivers a fully-managed experience with critical advanced networking capabilities.
- Trix Shots: Remote Code Execution on Aviatrix ControllerJul 2025Substations are critical nexus points in the power grid, transforming high-voltage electricity to ensure its safe and efficient delivery from power plants to millions of end-users.
- Cloud CISO Perspectives: The global threats facing EU healthcareJul 2025Welcome to the second Cloud CISO Perspectives for June 2025. Today, Thiébaut Meyer and Bhavana Bhinder from Google Cloud’s Office of the CISO discuss our work to help defend European healthcare against cyberattacks.
- Just say no: Build defense in depth with IAM Deny and Org PoliciesJun 2025In today's cloud landscape, safeguarding your cloud environment requires bolstering your Identity and Access Management (IAM) approach with more than allow policies and the principle of least privilege. To bolster your defenses, we offer a powerful tool: IAM Deny Policies.
- Google named a Strong Performer in The Forrester Wave for security analytics platformsJun 2025We are excited to announce that Google has been named a Strong Performer in The Forrester Wave?: Security Analytics Platforms, Q2 2025, in our first year of participation. The report acknowledges Google Cloud’s vision which relies heavily on Mandiant’s roots in threat-intelligence-driven security operations, which are evident in the platform.
- Audit smarter: Introducing Google Cloud’s Recommended AI Controls frameworkJun 2025As organizations build new generative AI applications and AI agents to automate business workflows, security and risk management management leaders face a new set of governance challenges.
- Protecting the Core: Securing Protection Relays in Modern SubstationsJun 2025This blog post highlights a Mandiant Red Team case study simulating an “Initial Access Brokerage” approach that discovered two vulnerabilities on Aviatrix Controller, a Software-Defined Networking (SDN) utility that allows for the creation of links between different cloud vendors and regions: CVE-2025-2171: an administrator authentication bypass CVE-2025-2172: an authenticated command injection
- What’s in an ASP? Creative Phishing Attack on Prominent Academics and Critics of RussiaJun 2025In cooperation with external partners, Google Threat Intelligence Group (GTIG) observed a Russia state-sponsored cyber threat actor impersonating the U.S. Department of State.
- Enhancing backup vaults with support for Persistent Disk, Hyperdisk, and multi-regionsJun 2025To help protect against evolving digital threats like ransomware and malicious deletions, last year, we introduced backup vault in the Google Cloud Backup and DR service, with support for Compute Engine VM backups.
Consult the Google Cybersecurity Action Team to discuss your digital transformation.
Google Cybersecurity Action TeamLearn more about our shared fate model, designed to give you greater trust and confidence in the cloud.
Shared fate modelExplore best practices for supporting your security and compliance objectives.
Security best practices center
