Lightnews — Scholar-powered news

The Big Idea: Security Assurance is NOT Just QA for AI! | Community

2 3

Anton Chuvakin @anton1chuvakin.bsky.social · 3d

"The Big Idea: Security Assurance is NOT Just QA for AI!" security.googlecloudcommunity.com/ciso-blog-77... <- this has the Cliff's notes; full paper if you can handle it: research.google/pubs/securit...

Think of quality assurance (QA) for products. Security assurance plays a similar, yet distinct, role for systems and applications and, yes, now also for AI. It's all about building high confidence…

250 Episodes of Cloud Security Podcast by Google: From Confidential Computing to AI-Ready SOC

2 3

Anton Chuvakin @anton1chuvakin.bsky.social · 5d

"250 Episodes of Cloud Security Podcast by Google: From Confidential Computing to AI-Ready SOC" medium.com/anton-on-sec... (cc @CloudSecPodcast)

So this may suck, but I am hoping to at least earn some points for honesty here. I wanted to write something pithy and smart once I…

How Google Does It: Threat modeling, from basics to AI | Google Cloud Blog

Anton Chuvakin @anton1chuvakin.bsky.social · 10d

"How Google Does It: Threat modeling, from basics to AI" cloud.google.com/transform/ho... <- another HGD blog, very fun, and yes, with some details omitted :-)

Threat modeling plays a critical role at Google in how we detect and respond to threats — and secure our use of the public cloud.

Simple to Ask: Is Your SOC AI Ready? Not Simple to Answer!

2

Reposted by Anton Chuvakin

Anton Chuvakin @anton1chuvakin.bsky.social · 22d

"Simple to Ask: Is Your #SOC #AI Ready? Not Simple to Answer!" medium.com/anton-on-sec... <- How to tell if your SOC is ready for AI? A simple 5 point framework :-)

In early 1900s, factory owners bolted the new electric dynamo onto their old, central-shaft-and-pulley systems. They thought they were…

How Google Does It: Building AI agents for cybersecurity and defense | Google Cloud Blog

Reposted by Anton Chuvakin

Anton Chuvakin @anton1chuvakin.bsky.social · 19d

"How Google Does It: Building #AI agents for cybersecurity and defense" cloud.google.com/transform/ho... <- another fun blog in our series on how Google does security; this time ... AI AGENTS! Enjoy!

At Google, we’ve moved from talking about AI agents to actively using them for security. Here are four critical lessons that helped shape our approach.

10 Tips for Governing AI Agents | Community

Anton Chuvakin @anton1chuvakin.bsky.social · 12d

"10+ Tips for Governing #AI Agents" security.googlecloudcommunity.com/community-bl... <- this is a bit dense (so perhaps not fun?) but kinda useful and stems from MANY painful conversations on this topic....

Co-Author: Marina KaganovichThe rapid evolution from generative artificial intelligence, commonly known as genAI, to agentic AI is a stark reminder to organizations to prioritize “going back to…

How Google Does It: Building AI agents for cybersecurity and defense | Google Cloud Blog

Anton Chuvakin @anton1chuvakin.bsky.social · 19d

"How Google Does It: Building #AI agents for cybersecurity and defense" cloud.google.com/transform/ho... <- another fun blog in our series on how Google does security; this time ... AI AGENTS! Enjoy!

At Google, we’ve moved from talking about AI agents to actively using them for security. Here are four critical lessons that helped shape our approach.

Simple to Ask: Is Your SOC AI Ready? Not Simple to Answer!

Anton Chuvakin @anton1chuvakin.bsky.social · 22d

"Simple to Ask: Is Your #SOC #AI Ready? Not Simple to Answer!" medium.com/anton-on-sec... <- How to tell if your SOC is ready for AI? A simple 5 point framework :-)

In early 1900s, factory owners bolted the new electric dynamo onto their old, central-shaft-and-pulley systems. They thought they were…

SIEM, Startups, and the Myth (Reality?) of IT Inertia: A Reformed Analyst Reflects on SIEM MQ 2025

Reposted by Anton Chuvakin

SwiftOnSecurity @swiftonsecurity.com · 22d

It's actually really fucked to sell a pet feeder that doesn't even have the schedule stored on the device.

Oh so they nuke Virginia and thousands of animals around the world just starve? That was your plan here?

11 32 260

Reposted by Anton Chuvakin

Anton Chuvakin @anton1chuvakin.bsky.social · 26d

"#SIEM, Startups, and the Myth (Reality?) of IT Inertia: A Reformed Analyst Reflects on SIEM MQ 2025" medium.com/anton-on-sec... <- kinda what it says in the title; warning: this is a tepid take, NOT a hot take :-)

It’s not every day you get to reflect on a journey that started as an odd “googley” startup and culminates in a shiny Leaders placement on…

SIEM, Startups, and the Myth (Reality?) of IT Inertia: A Reformed Analyst Reflects on SIEM MQ 2025

Anton Chuvakin @anton1chuvakin.bsky.social · 26d

"#SIEM, Startups, and the Myth (Reality?) of IT Inertia: A Reformed Analyst Reflects on SIEM MQ 2025" medium.com/anton-on-sec... <- kinda what it says in the title; warning: this is a tepid take, NOT a hot take :-)

It’s not every day you get to reflect on a journey that started as an odd “googley” startup and culminates in a shiny Leaders placement on…

AI Adoption: Learning from the Cloud's Early Days | Community

Reposted by Anton Chuvakin

Anton Chuvakin @anton1chuvakin.bsky.social · Oct 1

"#AI Adoption: Learning from the Cloud's Early Days" security.googlecloudcommunity.com/community-bl... <- this is NOT new, but I end up seeing more and more lessons for current AI adoption wave in the previous cloud adoption wave. It definitely rhymes!

In the early days of cloud computing around the mid-2010s, many organizations began informally experimenting with the cloud. Cloud was new and exciting, cloud was free (at times and in small doses),…

AI Adoption: Learning from the Cloud's Early Days | Community

1 4

Anton Chuvakin @anton1chuvakin.bsky.social · Oct 1

"#AI Adoption: Learning from the Cloud's Early Days" security.googlecloudcommunity.com/community-bl... <- this is NOT new, but I end up seeing more and more lessons for current AI adoption wave in the previous cloud adoption wave. It definitely rhymes!

In the early days of cloud computing around the mid-2010s, many organizations began informally experimenting with the cloud. Cloud was new and exciting, cloud was free (at times and in small doses),…

3 new ways to use AI as your security sidekick | Google Cloud Blog

1 4

Reposted by Anton Chuvakin

Anton Chuvakin @anton1chuvakin.bsky.social · Sep 24

"3 new ways to use #AI as your security sidekick" cloud.google.com/transform/3-... <- this is NOT new, but this use cases do help today even though they are so old (meh ... April 2025); bonus: nothing to buy to do this!

Generative AI is already providing clear and impactful security results. Here’s three decisive examples that organizations can adopt right now.

Decoupled SIEM: Where I Think We Are Now?

Anton Chuvakin @anton1chuvakin.bsky.social · Sep 26

"Decoupled SIEM: Where I Think We Are Now?" medium.com/anton-on-sec... <- well, you wanted this, and here is ... NOT this, but more of an incomplete thought / rambling on decoupled #SIEM

In the world of security operations, there is a growing fascination with the concept of a “decoupled SIEM,” where detection, reporting…

3 new ways to use AI as your security sidekick | Google Cloud Blog

1

Anton Chuvakin @anton1chuvakin.bsky.social · Sep 24

"3 new ways to use #AI as your security sidekick" cloud.google.com/transform/3-... <- this is NOT new, but this use cases do help today even though they are so old (meh ... April 2025); bonus: nothing to buy to do this!

Generative AI is already providing clear and impactful security results. Here’s three decisive examples that organizations can adopt right now.

Anton’s Security Blog Quarterly Q3 2025

Anton Chuvakin @anton1chuvakin.bsky.social · Sep 23

"Anton’s Security Blog Quarterly Q3 2025" medium.com/anton-on-sec... <- my usual semi regular list of my top blogs and podcasts, enjoy!

Amazingly, Medium has fixed the stats so my blog / podcast quarterly is back to life. As before, this covers both Anton on Security and my…

The Gravity of Process: Why New Tech Never Fixes Broken Process and Can AI Change It?

Anton Chuvakin @anton1chuvakin.bsky.social · Sep 16

"The Gravity of Process: Why New Tech Never Fixes Broken Process and Can AI Change It?" medium.com/@anton.chuva... <- long simmering debate on tech changing broken/missing process and #AI role in it...

Let’s tackle the age old question: can new technology fix broken or missing processes?

AI will consume all of IT by 2030—but not all IT jobs, Gartner says

Reposted by Anton Chuvakin

Ars Technica @arstechnica.com · Sep 8

The IT industry has already prepared for thousands of AI-driven job losses and will likely see more, though we could reach a point where AI will be something that everyone in IT will have to become familiar with in one way or another.

AI still threatens entry-level IT jobs.

arstechnica.com

5 9 33

Reposted by Anton Chuvakin

Anton Chuvakin @anton1chuvakin.bsky.social · Aug 5

"#SOC Visibility Triad is Now A Quad — SOC Visibility Quad 2025" medium.com/anton-on-sec...

1 6

Anton Chuvakin @anton1chuvakin.bsky.social · Aug 5

"#SOC Visibility Triad is Now A Quad — SOC Visibility Quad 2025" medium.com/anton-on-sec...

1 6

Reposted by Anton Chuvakin

Anton Chuvakin @anton1chuvakin.bsky.social · Jul 31

"Google Cloud Security Threat Horizons Report #12 Is Out!" medium.com/@anton.chuva... <- lots of fun cloud intrusions, some old ... some really old :-)

Google Cloud Security Threat Horizons Report #12 Is Out!

This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our next Threat…

Google Cloud Security Threat Horizons Report #12 Is Out!

Anton Chuvakin @anton1chuvakin.bsky.social · Jul 31

"Google Cloud Security Threat Horizons Report #12 Is Out!" medium.com/@anton.chuva... <- lots of fun cloud intrusions, some old ... some really old :-)

This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our next Threat…