Google Unveils AI Threat Defense Platform to Fight AI-Powered Cyberattacks

It involves mapping the environment for asset visibility, conducting deep-dive assessments and AI-driven posture validation, implementing workflows for fast, autonomous vulnerability remediation, and implementing machine-speed detection and response.The first step, Google says, requires exposure reduction by making sensitive assets unreachable from the internet. Each organization also needs to understand its time to remediation and its ability to prioritize risks, and needs to scan environments using AI to identify exposed APIs, applications, configurations, identities, and permissions.“Traditional attack surface management helps identify what is exposed, but organizations now need an AI penetration tester that can continuously analyze every exposure, determine whether it can actually be exploited, and understand what it would enable an attacker to do before attackers do the same,” the Silicon Valley tech giant says.Deep-dive code analysis and AI-driven adversarial testing and validation, the internet giant says, should focus on internet-accessible applications and services, data flows, authentication mechanisms, and business-critical systems.AI Threat Defense, it says, deploys AI agents designed to find deep vulnerabilities, enriches and validates the findings to uncover dependencies across source code libraries and binaries, and creates actionable response plans to help organizations manage surges in critical issues and roll out AI-generated patches.Just as attackers leverage AI to accelerate their attacks, AI Threat Defense aims to reduce time to remediate to minutes by proactively generating fixes directly in a developer’s IDE or CLI at build time. Each patch is tested, and libraries are tagged across source control and production environments for tracking.“Harnessing the full reasoning power of Gemini, CodeMender works seamlessly with Antigravity and Wiz to empower engineering teams to replace vulnerable code, re-write older code to modern, memory-safe languages, and to analyze library dependencies to coordinate seamless rollouts. In parallel, it automates triage and prioritizes remediation across applications and cloud infrastructure,” Google says.Finally, Google says, AI Threat Defense was also designed to implement machine-speed detection and real-time defense, defining ownership and tracking outcomes, establishing a consistent operational framework to help customers fight AI with AI.Related:UK Cyberspying Chief Calls AI ‘an Unstoppable Force’ and Warns About RussiaRelated:RevEng.AI Raises $15 Million to Hunt for Flaws and Backdoors in Software BinariesRelated:‘SymJack’ Attack Turns AI Coding Agents Into Supply Chain Attack Delivery SystemsRelated:Caught Off Guard: Securing AI After It Hits Production

The first step, Google says, requires exposure reduction by making sensitive assets unreachable from the internet. Each organization also needs to understand its time to remediation and its ability to prioritize risks, and needs to scan environments using AI to identify exposed APIs, applications, configurations, identities, and permissions.“Traditional attack surface management helps identify what is exposed, but organizations now need an AI penetration tester that can continuously analyze every exposure, determine whether it can actually be exploited, and understand what it would enable an attacker to do before attackers do the same,” the Silicon Valley tech giant says.Deep-dive code analysis and AI-driven adversarial testing and validation, the internet giant says, should focus on internet-accessible applications and services, data flows, authentication mechanisms, and business-critical systems.AI Threat Defense, it says, deploys AI agents designed to find deep vulnerabilities, enriches and validates the findings to uncover dependencies across source code libraries and binaries, and creates actionable response plans to help organizations manage surges in critical issues and roll out AI-generated patches.Just as attackers leverage AI to accelerate their attacks, AI Threat Defense aims to reduce time to remediate to minutes by proactively generating fixes directly in a developer’s IDE or CLI at build time. Each patch is tested, and libraries are tagged across source control and production environments for tracking.“Harnessing the full reasoning power of Gemini, CodeMender works seamlessly with Antigravity and Wiz to empower engineering teams to replace vulnerable code, re-write older code to modern, memory-safe languages, and to analyze library dependencies to coordinate seamless rollouts. In parallel, it automates triage and prioritizes remediation across applications and cloud infrastructure,” Google says.Finally, Google says, AI Threat Defense was also designed to implement machine-speed detection and real-time defense, defining ownership and tracking outcomes, establishing a consistent operational framework to help customers fight AI with AI.Related:UK Cyberspying Chief Calls AI ‘an Unstoppable Force’ and Warns About RussiaRelated:RevEng.AI Raises $15 Million to Hunt for Flaws and Backdoors in Software BinariesRelated:‘SymJack’ Attack Turns AI Coding Agents Into Supply Chain Attack Delivery SystemsRelated:Caught Off Guard: Securing AI After It Hits Production

“Traditional attack surface management helps identify what is exposed, but organizations now need an AI penetration tester that can continuously analyze every exposure, determine whether it can actually be exploited, and understand what it would enable an attacker to do before attackers do the same,” the Silicon Valley tech giant says.Deep-dive code analysis and AI-driven adversarial testing and validation, the internet giant says, should focus on internet-accessible applications and services, data flows, authentication mechanisms, and business-critical systems.AI Threat Defense, it says, deploys AI agents designed to find deep vulnerabilities, enriches and validates the findings to uncover dependencies across source code libraries and binaries, and creates actionable response plans to help organizations manage surges in critical issues and roll out AI-generated patches.Just as attackers leverage AI to accelerate their attacks, AI Threat Defense aims to reduce time to remediate to minutes by proactively generating fixes directly in a developer’s IDE or CLI at build time. Each patch is tested, and libraries are tagged across source control and production environments for tracking.“Harnessing the full reasoning power of Gemini, CodeMender works seamlessly with Antigravity and Wiz to empower engineering teams to replace vulnerable code, re-write older code to modern, memory-safe languages, and to analyze library dependencies to coordinate seamless rollouts. In parallel, it automates triage and prioritizes remediation across applications and cloud infrastructure,” Google says.Finally, Google says, AI Threat Defense was also designed to implement machine-speed detection and real-time defense, defining ownership and tracking outcomes, establishing a consistent operational framework to help customers fight AI with AI.Related:UK Cyberspying Chief Calls AI ‘an Unstoppable Force’ and Warns About RussiaRelated:RevEng.AI Raises $15 Million to Hunt for Flaws and Backdoors in Software BinariesRelated:‘SymJack’ Attack Turns AI Coding Agents Into Supply Chain Attack Delivery SystemsRelated:Caught Off Guard: Securing AI After It Hits Production

Deep-dive code analysis and AI-driven adversarial testing and validation, the internet giant says, should focus on internet-accessible applications and services, data flows, authentication mechanisms, and business-critical systems.AI Threat Defense, it says, deploys AI agents designed to find deep vulnerabilities, enriches and validates the findings to uncover dependencies across source code libraries and binaries, and creates actionable response plans to help organizations manage surges in critical issues and roll out AI-generated patches.Just as attackers leverage AI to accelerate their attacks, AI Threat Defense aims to reduce time to remediate to minutes by proactively generating fixes directly in a developer’s IDE or CLI at build time. Each patch is tested, and libraries are tagged across source control and production environments for tracking.“Harnessing the full reasoning power of Gemini, CodeMender works seamlessly with Antigravity and Wiz to empower engineering teams to replace vulnerable code, re-write older code to modern, memory-safe languages, and to analyze library dependencies to coordinate seamless rollouts. In parallel, it automates triage and prioritizes remediation across applications and cloud infrastructure,” Google says.Finally, Google says, AI Threat Defense was also designed to implement machine-speed detection and real-time defense, defining ownership and tracking outcomes, establishing a consistent operational framework to help customers fight AI with AI.Related:UK Cyberspying Chief Calls AI ‘an Unstoppable Force’ and Warns About RussiaRelated:RevEng.AI Raises $15 Million to Hunt for Flaws and Backdoors in Software BinariesRelated:‘SymJack’ Attack Turns AI Coding Agents Into Supply Chain Attack Delivery SystemsRelated:Caught Off Guard: Securing AI After It Hits Production

AI Threat Defense, it says, deploys AI agents designed to find deep vulnerabilities, enriches and validates the findings to uncover dependencies across source code libraries and binaries, and creates actionable response plans to help organizations manage surges in critical issues and roll out AI-generated patches.Just as attackers leverage AI to accelerate their attacks, AI Threat Defense aims to reduce time to remediate to minutes by proactively generating fixes directly in a developer’s IDE or CLI at build time. Each patch is tested, and libraries are tagged across source control and production environments for tracking.“Harnessing the full reasoning power of Gemini, CodeMender works seamlessly with Antigravity and Wiz to empower engineering teams to replace vulnerable code, re-write older code to modern, memory-safe languages, and to analyze library dependencies to coordinate seamless rollouts. In parallel, it automates triage and prioritizes remediation across applications and cloud infrastructure,” Google says.Finally, Google says, AI Threat Defense was also designed to implement machine-speed detection and real-time defense, defining ownership and tracking outcomes, establishing a consistent operational framework to help customers fight AI with AI.Related:UK Cyberspying Chief Calls AI ‘an Unstoppable Force’ and Warns About RussiaRelated:RevEng.AI Raises $15 Million to Hunt for Flaws and Backdoors in Software BinariesRelated:‘SymJack’ Attack Turns AI Coding Agents Into Supply Chain Attack Delivery SystemsRelated:Caught Off Guard: Securing AI After It Hits Production

Just as attackers leverage AI to accelerate their attacks, AI Threat Defense aims to reduce time to remediate to minutes by proactively generating fixes directly in a developer’s IDE or CLI at build time. Each patch is tested, and libraries are tagged across source control and production environments for tracking.“Harnessing the full reasoning power of Gemini, CodeMender works seamlessly with Antigravity and Wiz to empower engineering teams to replace vulnerable code, re-write older code to modern, memory-safe languages, and to analyze library dependencies to coordinate seamless rollouts. In parallel, it automates triage and prioritizes remediation across applications and cloud infrastructure,” Google says.Finally, Google says, AI Threat Defense was also designed to implement machine-speed detection and real-time defense, defining ownership and tracking outcomes, establishing a consistent operational framework to help customers fight AI with AI.Related:UK Cyberspying Chief Calls AI ‘an Unstoppable Force’ and Warns About RussiaRelated:RevEng.AI Raises $15 Million to Hunt for Flaws and Backdoors in Software BinariesRelated:‘SymJack’ Attack Turns AI Coding Agents Into Supply Chain Attack Delivery SystemsRelated:Caught Off Guard: Securing AI After It Hits Production

“Harnessing the full reasoning power of Gemini, CodeMender works seamlessly with Antigravity and Wiz to empower engineering teams to replace vulnerable code, re-write older code to modern, memory-safe languages, and to analyze library dependencies to coordinate seamless rollouts. In parallel, it automates triage and prioritizes remediation across applications and cloud infrastructure,” Google says.Finally, Google says, AI Threat Defense was also designed to implement machine-speed detection and real-time defense, defining ownership and tracking outcomes, establishing a consistent operational framework to help customers fight AI with AI.Related:UK Cyberspying Chief Calls AI ‘an Unstoppable Force’ and Warns About RussiaRelated:RevEng.AI Raises $15 Million to Hunt for Flaws and Backdoors in Software BinariesRelated:‘SymJack’ Attack Turns AI Coding Agents Into Supply Chain Attack Delivery SystemsRelated:Caught Off Guard: Securing AI After It Hits Production

Finally, Google says, AI Threat Defense was also designed to implement machine-speed detection and real-time defense, defining ownership and tracking outcomes, establishing a consistent operational framework to help customers fight AI with AI.Related:UK Cyberspying Chief Calls AI ‘an Unstoppable Force’ and Warns About RussiaRelated:RevEng.AI Raises $15 Million to Hunt for Flaws and Backdoors in Software BinariesRelated:‘SymJack’ Attack Turns AI Coding Agents Into Supply Chain Attack Delivery SystemsRelated:Caught Off Guard: Securing AI After It Hits Production

Related:UK Cyberspying Chief Calls AI ‘an Unstoppable Force’ and Warns About RussiaRelated:RevEng.AI Raises $15 Million to Hunt for Flaws and Backdoors in Software BinariesRelated:‘SymJack’ Attack Turns AI Coding Agents Into Supply Chain Attack Delivery SystemsRelated:Caught Off Guard: Securing AI After It Hits Production

Related:RevEng.AI Raises $15 Million to Hunt for Flaws and Backdoors in Software BinariesRelated:‘SymJack’ Attack Turns AI Coding Agents Into Supply Chain Attack Delivery SystemsRelated:Caught Off Guard: Securing AI After It Hits Production

Source: SecurityWeek