llm-catalog-archive

Change

91e8559

91e8559fc7c25a9b98da1e29f429f94d17818565 · commit on GitHub

gcloud-blog-feed: changed (537010 bytes, HTTP 200)

raw/gcloud-blog-feed/response.xml modified

Lines added
+239
Lines removed
-261
Stored bytes at this commit
537,010
Timestamp
observed
Raw artifact at this commit
raw/gcloud-blog-feed/response.xml
Recorded headers
observed_at2026-09-19T04:38:09.941Z
origin_datenull
status200
final URLhttps://cloudblog.withgoogle.com/products/ai-machine-learning/rss/
etagnull
last-modifiednull
dateSat, 19 Sep 2026 04:38:09 GMT
agenull
cache-controlpublic, max-age=600, s-maxage=600
cf-cache-statusnull
content-encodinggzip
content-length139510
@@@ -1,8 +1,169 @@
<?xml version="1.0" encoding="utf-8"?>
-<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:media="http://search.yahoo.com/mrss/"><channel><title>AI &amp; Machine Learning</title><link>https://cloud.google.com/blog/products/a
+<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:media="http://search.yahoo.com/mrss/"><channel><title>AI &amp; Machine Learning</title><link>https://cloud.google.com/blog/products/a
+&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;&lt;strong style="vertical-align: baseline;"&gt;Solution architecture and implementation &lt;/strong&gt;&lt;/span&gt;&lt;/p&gt;&lt;/div&gt;
+&lt;div class="block-image_full_width"&gt;
+
+
+
+
+
+
+
+ &lt;div class="article-module h-c-page"&gt;
+ &lt;div class="h-c-grid"&gt;
+
+
+ &lt;figure class="article-image--large
+
+
+ h-c-grid__col
+ h-c-grid__col--6 h-c-grid__col--offset-3
+
+
+ "
+ &gt;
+
+
+
+
+ &lt;img
+ src="https://storage.googleapis.com/gweb-cloudblog-publish/images/image1_DMfXM9r.max-1000x1000.png"
+
+ alt="image1"&gt;
+
+ &lt;/a&gt;
+
+ &lt;figcaption class="article-image__caption "&gt;&lt;p data-block-key="3cwwr"&gt;Pervasive pre-submit agentic scanning: security as part of ongoing software development&lt;/p&gt;&lt;/figcaption&gt;
+
+ &lt;/figure&gt;
+
+
+ &lt;/div&gt;
+ &lt;/div&gt;
+
+
+
+
+
+&lt;/div&gt;
+&lt;div class="block-paragraph_advanced"&gt;&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;Traditionally, the technology industry relies on large one-off security scans that are slow and lack sufficient context. As a result, they often find vulnerabilities too late. Our approach instead focu
+&lt;h3&gt;&lt;span style="vertical-align: baseline;"&gt;The importance of localized threat models&lt;/span&gt;&lt;/h3&gt;
+&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;For this initiative, w&lt;/span&gt;&lt;span style="vertical-align: baseline;"&gt;e evolved &lt;/span&gt;&lt;a href="https://github.com/google/mantis" rel="noopener" target="_blank"&gt;&lt;span style="text-decoration: underline; vertical-align: b
+&lt;h3&gt;&lt;span style="vertical-align: baseline;"&gt;Specialized triage agents speed up development&lt;/span&gt;&lt;/h3&gt;
+&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;Vulnerability scanning as part of code check-in requires it to respond quickly to the developer or agents generating the code, so as not to impede engineering productivity. To get responses with low latency, we run a two-step validation process.
+&lt;h3&gt;&lt;span style="vertical-align: baseline;"&gt;Bug fix agents close the loop&lt;/span&gt;&lt;/h3&gt;
+&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;Finding vulnerabilities is only half the battle. The last component of our solution is an automated bug-fix agent that uses the scan results and generated proofs (snippet of code that demonstrates how the vulnerability is exercised) to autonomou
+&lt;h3&gt;&lt;span style="vertical-align: baseline;"&gt;Learnings and call to action &lt;/span&gt;&lt;/h3&gt;
+&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;Embedding continuous scanning directly into the software development lifecycle has been a game changer at Google; its suggestions are widely adopted, and it’s prevented a multitude of vulnerabilities from being introduced into the codebase. But
+&lt;ol&gt;
+&lt;li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"&gt;
+&lt;p role="presentation"&gt;&lt;strong style="vertical-align: baseline;"&gt;Keep systems separate:&lt;/strong&gt;&lt;span style="vertical-align: baseline;"&gt; To prevent bias, keep the harnesses, rules, and context for each of your development, scanning, triage agents separate. Pair lightweight AI
+&lt;/li&gt;
+&lt;li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"&gt;
+&lt;p role="presentation"&gt;&lt;strong style="vertical-align: baseline;"&gt;Use context wisely: &lt;/strong&gt;&lt;span style="vertical-align: baseline;"&gt;Feed your agents your existing threat models. Precise context is the answer to reducing false positives, and up-to-date threat models set a hi
+&lt;/li&gt;
+&lt;li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"&gt;
+&lt;p role="presentation"&gt;&lt;strong style="vertical-align: baseline;"&gt;Build a good harness:&lt;/strong&gt;&lt;span style="vertical-align: baseline;"&gt; While the choice of the underlying model is important, using a multi-agent harness can have substantial impact, by helping compensate for va
+&lt;/li&gt;
+&lt;li aria-level="1" style="list-style-type: decimal; vertical-align: baseline;"&gt;
+&lt;p role="presentation"&gt;&lt;strong style="vertical-align: baseline;"&gt;Automate the fix:&lt;/strong&gt;&lt;span style="vertical-align: baseline;"&gt; Use agents to also propose human-in-the-loop fixes, to further reduce time-to-resolution. &lt;/span&gt;&lt;/p&gt;
+&lt;/li&gt;
+&lt;/ol&gt;
+&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;If you want to get started on your own AI-native security transformation, &lt;/span&gt;&lt;a href="https://cloud.google.com/blog/products/identity-security/getting-started-with-the-mantis-harness-to-find-and-fix-bugs?e=48754805"&gt;&lt;span styl
+&lt;hr/&gt;
+&lt;p&gt;&lt;sup&gt;&lt;span style="font-style: italic; vertical-align: baseline;"&gt;With special recognition to critical team members who made this delivery possible: Stella Voutsina (Lead Program Manager), Yulong Zhang (Senior Staff Security Engineer, Mantis), and Nick Galloway (Staff Security En
+&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;Orange calls these FinOps Clean Days. Together with gamified hackathons, they've earned the company's 100-plus person FinOps community a Net Promoter Score within the organization that’s above 70.&lt;/span&gt;&lt;/p&gt;
+&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;Those numbers point at something the wider industry is wrestling with. Recent State of FinOps reports identify getting engineers to take action as one of the top challenges organizations face. Moving from awareness to action means finding ways t
+&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;That makes FinOps a business change problem. And business change problems have known solutions. We spoke with Camille Marini, the FinOps lead at Orange, to get a deeper understanding of how the company overcame these hurdles to accelerate AI ado
+&lt;h2&gt;&lt;span style="vertical-align: baseline;"&gt;Why the Clean Days work&lt;/span&gt;&lt;/h2&gt;
+&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;Orange has held two principles since it set up its FinOps team. First, Cloud FinOps is a shared responsibility, with every stakeholder in a project involved in their own way. And the only path to that shared responsibility runs through communica
+&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;“We insisted on the concept of shared responsibility across the organization for our FinOps practices,” Marini told us. “It’s very similar to how we approach cloud security. We needed to make teams understand that every single stakeholder in a p
+&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;Those principles led Orange to create a FinOps Community of Practice, with support from Google Cloud Consulting. The team ran it on standardized communication channels so the methodology reached well beyond the central group, and kept the meetin
+&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;The Clean Days came from a clear-eyed reading of how agile teams actually operate. In agile environments with deployment running constantly, optimization work rarely wins against the sprint. Delivery priorities, backlogs, and daily operations ta
+&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;McKinsey's four building blocks of change explain why this approach lands. Any large organizational change, the framework holds, requires action across four areas:&lt;/span&gt;&lt;/p&gt;
+&lt;ul&gt;
+&lt;li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"&gt;
+&lt;p role="presentation"&gt;&lt;span style="vertical-align: baseline;"&gt;Conviction and understanding: "I know what is expected of me and I agree with it."&lt;/span&gt;&lt;/p&gt;
+&lt;/li&gt;
+&lt;li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"&gt;
+&lt;p role="presentation"&gt;&lt;span style="vertical-align: baseline;"&gt;Formal mechanisms: "The structures, processes, and systems reinforce the change."&lt;/span&gt;&lt;/p&gt;
+&lt;/li&gt;
+&lt;li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"&gt;
+&lt;p role="presentation"&gt;&lt;span style="vertical-align: baseline;"&gt;Role modeling: "I see my leaders and colleagues behaving differently."&lt;/span&gt;&lt;/p&gt;
+&lt;/li&gt;
+&lt;li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"&gt;
+&lt;p role="presentation"&gt;&lt;span style="vertical-align: baseline;"&gt;Talent and skills: "I have the skills and opportunities to behave in a new way."&lt;/span&gt;&lt;/p&gt;
+&lt;/li&gt;
+&lt;/ul&gt;
+&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;Map Orange's practice onto those blocks and the pattern is visible. Gamification and rewards give engineers colleagues to emulate: The leaderboard makes different behavior visible, and sponsors see the quick wins for themselves. Experienced prac
+&lt;div class="block-image_full_width"&gt;
+
+
+
+
+
+
+
+ &lt;div class="article-module h-c-page"&gt;
+ &lt;div class="h-c-grid"&gt;
+
+
+ &lt;figure class="article-image--large
+
+
+ h-c-grid__col
+ h-c-grid__col--6 h-c-grid__col--offset-3
+
+
+ "
+ &gt;
+
+
+
+
+ &lt;img
+ src="https://storage.googleapis.com/gweb-cloudblog-publish/images/1_m5giQlH.max-1000x1000.jpg"
+
+ alt="image2"&gt;
+
+ &lt;/a&gt;
+
+ &lt;figcaption class="article-image__caption "&gt;&lt;p data-block-key="j87xi"&gt;FinOps activities mapped to the four building blocks of change, with the points where AI agents can reinforce them.&lt;/p&gt;&lt;/figcaption&gt;
+
+ &lt;/figure&gt;
+
+
+ &lt;/div&gt;
+ &lt;/div&gt;
+
+
+
+
+
+&lt;/div&gt;
+&lt;div class="block-paragraph_advanced"&gt;&lt;h2&gt;&lt;span style="vertical-align: baseline;"&gt;What happens beyond 100 people&lt;/span&gt;&lt;/h2&gt;
+&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;A community of 100 engaged people is an achievement. But in an organization with thousands of engineers, no central FinOps team can reach everyone directly. The question for leaders is how to extend what a community like Orange's creates — the a
+&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;This is where AI agents extend the capabilities of a FinOps team with two core benefits. They take on complex, time-intensive activities that previously needed a human, and they reduce friction around FinOps for individuals across the business.&
+&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;Getting teams to adopt them takes a strategy aimed at your own organization's pain points, which often come from high cognitive load, unclear accountability, or competing priorities. Start by finding where engagement drops off in your FinOps lif
+&lt;ul&gt;
+&lt;li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"&gt;
+&lt;p role="presentation"&gt;&lt;span style="vertical-align: baseline;"&gt;An awareness gap: If teams are unsure of their spend impact, an insight agent can push real-time cost data into their daily tools.&lt;/span&gt;&lt;/p&gt;
+&lt;/li&gt;
+&lt;li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"&gt;
+&lt;p role="presentation"&gt;&lt;span style="vertical-align: baseline;"&gt;A bandwidth gap: If engineers are too busy with backlogs, a remediation agent can identify quick wins and present them as ready-to-merge code changes.&lt;/span&gt;&lt;/p&gt;
+&lt;/li&gt;
+&lt;li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"&gt;
+&lt;p role="presentation"&gt;&lt;span style="vertical-align: baseline;"&gt;A complexity gap: If reporting feels like a manual chore, an orchestration agent can gather the data and simplify the process.&lt;/span&gt;&lt;/p&gt;
+&lt;/li&gt;
+&lt;/ul&gt;
+&lt;h2&gt;&lt;span style="vertical-align: baseline;"&gt;Start with trust, then add autonomy&lt;/span&gt;&lt;/h2&gt;
+&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;The sensible path runs in sequence. Establish the community practice, the way Orange did. Then introduce read-only agents that inform and suggest. Only once those are established across the community should you build agents that execute changes.
+&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;How you build depends on who's building. For teams that want to deploy quickly with minimal code, the &lt;/span&gt;&lt;a href="https://cloud.google.com/gemini-enterprise"&gt;&lt;span style="text-decoration: underline; vertical-align: baseline;"&
+&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;Cloud FinOps is moving beyond centralized reporting toward action that happens where the work does. The organizations getting there start with the culture, then use agents to carry it further than any one team could reach. &lt;/span&gt;&lt;/p&gt
+&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;Orange's numbers came out of the community work. Building that foundation is the part worth copying first. When you're ready to extend it, &lt;/span&gt;&lt;a href="https://cloud.google.com/consulting" rel="noopener" target="_blank"&gt;&lt;span s
&lt;div class="block-aside"&gt;&lt;dl&gt;
&lt;dt&gt;aside_block&lt;/dt&gt;
- &lt;dd&gt;&amp;lt;ListValue: [StructValue([(&amp;#x27;title&amp;#x27;, &amp;#x27;Get vital board insights with Google Cloud&amp;#x27;), (&amp;#x27;body&amp;#x27;, &amp;lt;wagtail.rich_text.RichText object at 0x7fc0ed4f69d0&amp;gt;), (&amp;#x27;btn_text&amp;#x27;, &amp;#x27;Visit the hub&amp;#x27
+ &lt;dd&gt;&amp;lt;ListValue: [StructValue([(&amp;#x27;title&amp;#x27;, &amp;#x27;Get vital board insights with Google Cloud&amp;#x27;), (&amp;#x27;body&amp;#x27;, &amp;lt;wagtail.rich_text.RichText object at 0x7f3cf7176850&amp;gt;), (&amp;#x27;btn_text&amp;#x27;, &amp;#x27;Visit the hub&amp;#x27
&lt;/dl&gt;&lt;/div&gt;
&lt;div class="block-paragraph"&gt;&lt;h3 data-block-key="hswvv"&gt;&lt;b&gt;‘Spellcheck for cybersecurity’ and beyond: How Google monitors AI threats and advances AI defenses&lt;/b&gt;&lt;/h3&gt;&lt;p data-block-key="61crd"&gt;&lt;i&gt;By Sandra Joyce, VP, Google Threat Intelligence&lt;/i&gt;&lt;/p
&lt;div class="block-paragraph_with_image"&gt;&lt;div class="article-module h-c-page"&gt;
@@@ -116,6 +277,57 @@
&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;Pioneered by the &lt;/span&gt;&lt;a href="https://www.wiz.io/lp/wiz-security-graph" rel="noopener" target="_blank"&gt;&lt;span style="text-decoration: underline; vertical-align: baseline;"&gt;Wiz Security Graph&lt;/span&gt;&lt;/a&gt;&lt;span sty
&lt;p&gt;&lt;strong style="vertical-align: baseline;"&gt;Defending against AI threats&lt;/strong&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;Threat actors are rapidly moving beyond simple prompt generation toward fully-automated, multi-agent attack pipelines.&lt;/span&gt;&lt;/p&gt;&lt;/div&gt;
+&lt;div class="block-video"&gt;
+
+
+
+&lt;div class="article-module article-video "&gt;
+ &lt;figure&gt;
+ &lt;a class="h-c-video h-c-video--marquee"
+ href="https://youtube.com/watch?v=Wpo-5ke9uvQ"
+ data-glue-modal-trigger="uni-modal-Wpo-5ke9uvQ-"
+ data-glue-modal-disabled-on-mobile="true"&gt;
+
+
+
+
+ &lt;div class="article-video__aspect-image"
+ style="background-image: url(https://storage.googleapis.com/gweb-cloudblog-publish/images/07_CDS_Keynote_Youtube_Thumbnails.max-1000x1000.png);"&gt;
+ &lt;span class="h-u-visually-hidden"&gt;Security in the AI Era&lt;/span&gt;
+ &lt;/div&gt;
+
+ &lt;svg role="img" class="h-c-video__play h-c-icon h-c-icon--color-white"&gt;
+ &lt;use xlink:href="#mi-youtube-icon"&gt;&lt;/use&gt;
+ &lt;/svg&gt;
+ &lt;/a&gt;
+
+
+ &lt;figcaption class="article-video__caption h-c-page"&gt;
+
+ &lt;h4 class="h-c-headline h-c-headline--four h-u-font-weight-medium h-u-mt-std"&gt;Cyber Defense Summit 2026: Security in the AI era&lt;/h4&gt;
+
+
+ &lt;/figcaption&gt;
+
+ &lt;/figure&gt;
+&lt;/div&gt;
+
+&lt;div class="h-c-modal--video"
+ data-glue-modal="uni-modal-Wpo-5ke9uvQ-"
+ data-glue-modal-close-label="Close Dialog"&gt;
+ &lt;a class="glue-yt-video"
+ data-glue-yt-video-autoplay="true"
+ data-glue-yt-video-height="99%"
+ data-glue-yt-video-vid="Wpo-5ke9uvQ"
+ data-glue-yt-video-width="100%"
+ href="https://youtube.com/watch?v=Wpo-5ke9uvQ"
+ ng-cloak&gt;
+ &lt;/a&gt;
+&lt;/div&gt;
+
+&lt;/div&gt;
+&lt;div class="block-paragraph_advanced"&gt;&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;In one notable intrusion investigated by Mandiant, a financially-motivated actor compromised an organization's cloud infrastructure and deployed an autonomous agent framework. The threat actor used an
+&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;We’re also tracking adversaries using AI as an intelligent orchestrator across the entire attack lifecycle. GTIG recently observed a PRC-nexus espionage group experimenting with a tool called CC Switch to cycle across multiple accounts and swap
&lt;div class="block-pull_quote"&gt;&lt;div class="uni-pull-quote h-c-page"&gt;
&lt;section class="h-c-grid"&gt;
&lt;div class="uni-pull-quote__wrapper h-c-grid__col h-c-grid__col--8 h-c-grid__col-m--6 h-c-grid__col-l--6
@@@ -130,9 +342,7 @@
&lt;/div&gt;
&lt;/div&gt;
-&lt;div class="block-paragraph_advanced"&gt;&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;In one notable intrusion investigated by Mandiant, a financially-motivated actor compromised an organization's cloud infrastructure and deployed an autonomous agent framework. The threat actor used an
-&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;We’re also tracking adversaries using AI as an intelligent orchestrator across the entire attack lifecycle. GTIG recently observed a PRC-nexus espionage group experimenting with a tool called CC Switch to cycle across multiple accounts and swap
-&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;While these machine-speed attacks sound daunting, defenders actually hold an asymmetric advantage. Even when armed with autonomous AI, an attacker operates from the outside with limited context — probing in the dark, guessing connections, and ho
+&lt;div class="block-paragraph_advanced"&gt;&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;While these machine-speed attacks sound daunting, defenders actually hold an asymmetric advantage. Even when armed with autonomous AI, an attacker operates from the outside with limited context — probi
&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;Defenders, on the other hand, &lt;/span&gt;&lt;a href="https://cloud.google.com/blog/products/identity-security/cloud-ciso-perspectives-how-ai-leverages-deep-context-defenders-advantage"&gt;&lt;span style="text-decoration: underline; vertical-al
&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;To take advantage of your deep context, it’s imperative to shift from manual, human-scale incident response to machine-speed security operations. We can no longer rely on human analysts manually triaging endless backlogs of static alerts. &lt;/s
&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;By codifying our frontline threat intelligence directly into these AI models, these autonomous agents can continuously monitor for, investigate, prioritize, and remediate attacks.&lt;/span&gt;&lt;/p&gt;
@@@ -156,104 +366,15 @@
&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;To learn more about our approach to securing the AI era, please check out our new &lt;/span&gt;&lt;a href="https://cloud.google.com/security/resources/ai-risk-and-resilience-2026"&gt;&lt;span style="text-decoration: underline; vertical-align: ba
&lt;div class="block-aside"&gt;&lt;dl&gt;
&lt;dt&gt;aside_block&lt;/dt&gt;
- &lt;dd&gt;&amp;lt;ListValue: [StructValue([(&amp;#x27;title&amp;#x27;, &amp;#x27;Learn something new&amp;#x27;), (&amp;#x27;body&amp;#x27;, &amp;lt;wagtail.rich_text.RichText object at 0x7fc0ed4f6f10&amp;gt;), (&amp;#x27;btn_text&amp;#x27;, &amp;#x27;Watch now&amp;#x27;), (&amp;#x27;href&amp;#x2
+ &lt;dd&gt;&amp;lt;ListValue: [StructValue([(&amp;#x27;title&amp;#x27;, &amp;#x27;Learn something new&amp;#x27;), (&amp;#x27;body&amp;#x27;, &amp;lt;wagtail.rich_text.RichText object at 0x7f3cf7472290&amp;gt;), (&amp;#x27;btn_text&amp;#x27;, &amp;#x27;Watch now&amp;#x27;), (&amp;#x27;href&amp;#x2
&lt;/dl&gt;&lt;/div&gt;
&lt;div class="block-paragraph"&gt;&lt;h3 data-block-key="4bd61"&gt;&lt;b&gt;In case you missed it&lt;/b&gt;&lt;/h3&gt;&lt;p data-block-key="cvt34"&gt;Here are the latest updates, products, services, and resources from our security teams so far this month:&lt;/p&gt;&lt;ul&gt;&lt;li data-block-key="7
&lt;div class="block-aside"&gt;&lt;dl&gt;
&lt;dt&gt;aside_block&lt;/dt&gt;
- &lt;dd&gt;&amp;lt;ListValue: [StructValue([(&amp;#x27;title&amp;#x27;, &amp;#x27;Join the Google Cloud CISO Community&amp;#x27;), (&amp;#x27;body&amp;#x27;, &amp;lt;wagtail.rich_text.RichText object at 0x7fc0ed4f5d90&amp;gt;), (&amp;#x27;btn_text&amp;#x27;, &amp;#x27;Learn more&amp;#x27;), (&amp
+ &lt;dd&gt;&amp;lt;ListValue: [StructValue([(&amp;#x27;title&amp;#x27;, &amp;#x27;Join the Google Cloud CISO Community&amp;#x27;), (&amp;#x27;body&amp;#x27;, &amp;lt;wagtail.rich_text.RichText object at 0x7f3cf7470790&amp;gt;), (&amp;#x27;btn_text&amp;#x27;, &amp;#x27;Learn more&amp;#x27;), (&amp
&lt;/dl&gt;&lt;/div&gt;
&lt;div class="block-paragraph"&gt;&lt;h3 data-block-key="29tyz"&gt;&lt;b&gt;Threat Intelligence news&lt;/b&gt;&lt;/h3&gt;&lt;ul&gt;&lt;li data-block-key="2prfo"&gt;&lt;b&gt;AI Threat Tracker: From prompting to autonomy&lt;/b&gt;: In the newest Google Threat Intelligence Group (GTIG) report on the a
-&lt;div class="block-paragraph"&gt;&lt;h3 data-block-key="rcfc5"&gt;&lt;b&gt;Now hear this: Podcasts from Google Cloud&lt;/b&gt;&lt;/h3&gt;&lt;ul&gt;&lt;li data-block-key="d67qn"&gt;&lt;b&gt;Cloud Security Podcast: Patching browsers with AI, agents, Rust, and your tabs&lt;/b&gt;: Jasika Bawa and Dou
-&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;Orange calls these FinOps Clean Days. Together with gamified hackathons, they've earned the company's 100-plus person FinOps community a Net Promoter Score within the organization that’s above 70.&lt;/span&gt;&lt;/p&gt;
-&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;Those numbers point at something the wider industry is wrestling with. Recent State of FinOps reports identify getting engineers to take action as one of the top challenges organizations face. Moving from awareness to action means finding ways t
-&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;That makes FinOps a business change problem. And business change problems have known solutions. We spoke with Camille Marini, the FinOps lead at Orange, to get a deeper understanding of how the company overcame these hurdles to accelerate AI ado
-&lt;h2&gt;&lt;span style="vertical-align: baseline;"&gt;Why the Clean Days work&lt;/span&gt;&lt;/h2&gt;
-&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;Orange has held two principles since it set up its FinOps team. First, Cloud FinOps is a shared responsibility, with every stakeholder in a project involved in their own way. And the only path to that shared responsibility runs through communica
-&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;“We insisted on the concept of shared responsibility across the organization for our FinOps practices,” Marini told us. “It’s very similar to how we approach cloud security. We needed to make teams understand that every single stakeholder in a p
-&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;Those principles led Orange to create a FinOps Community of Practice, with support from Google Cloud Consulting. The team ran it on standardized communication channels so the methodology reached well beyond the central group, and kept the meetin
-&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;The Clean Days came from a clear-eyed reading of how agile teams actually operate. In agile environments with deployment running constantly, optimization work rarely wins against the sprint. Delivery priorities, backlogs, and daily operations ta
-&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;McKinsey's four building blocks of change explain why this approach lands. Any large organizational change, the framework holds, requires action across four areas:&lt;/span&gt;&lt;/p&gt;
-&lt;ul&gt;
-&lt;li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"&gt;
-&lt;p role="presentation"&gt;&lt;span style="vertical-align: baseline;"&gt;Conviction and understanding: "I know what is expected of me and I agree with it."&lt;/span&gt;&lt;/p&gt;
-&lt;/li&gt;
-&lt;li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"&gt;
-&lt;p role="presentation"&gt;&lt;span style="vertical-align: baseline;"&gt;Formal mechanisms: "The structures, processes, and systems reinforce the change."&lt;/span&gt;&lt;/p&gt;
-&lt;/li&gt;
-&lt;li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"&gt;
-&lt;p role="presentation"&gt;&lt;span style="vertical-align: baseline;"&gt;Role modeling: "I see my leaders and colleagues behaving differently."&lt;/span&gt;&lt;/p&gt;
-&lt;/li&gt;
-&lt;li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"&gt;
-&lt;p role="presentation"&gt;&lt;span style="vertical-align: baseline;"&gt;Talent and skills: "I have the skills and opportunities to behave in a new way."&lt;/span&gt;&lt;/p&gt;
-&lt;/li&gt;
-&lt;/ul&gt;
-&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;Map Orange's practice onto those blocks and the pattern is visible. Gamification and rewards give engineers colleagues to emulate: The leaderboard makes different behavior visible, and sponsors see the quick wins for themselves. Experienced prac
-&lt;div class="block-image_full_width"&gt;
-
-
-
-
-
-
-
- &lt;div class="article-module h-c-page"&gt;
- &lt;div class="h-c-grid"&gt;
-
-
- &lt;figure class="article-image--large
-
-
- h-c-grid__col
- h-c-grid__col--6 h-c-grid__col--offset-3
-
-
- "
- &gt;
-
-
-
-
- &lt;img
- src="https://storage.googleapis.com/gweb-cloudblog-publish/images/1_m5giQlH.max-1000x1000.jpg"
-
- alt="image2"&gt;
-
- &lt;/a&gt;
-
- &lt;figcaption class="article-image__caption "&gt;&lt;p data-block-key="j87xi"&gt;FinOps activities mapped to the four building blocks of change, with the points where AI agents can reinforce them.&lt;/p&gt;&lt;/figcaption&gt;
-
- &lt;/figure&gt;
-
-
- &lt;/div&gt;
- &lt;/div&gt;
-
-
-
-
-
-&lt;/div&gt;
-&lt;div class="block-paragraph_advanced"&gt;&lt;h2&gt;&lt;span style="vertical-align: baseline;"&gt;What happens beyond 100 people&lt;/span&gt;&lt;/h2&gt;
-&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;A community of 100 engaged people is an achievement. But in an organization with thousands of engineers, no central FinOps team can reach everyone directly. The question for leaders is how to extend what a community like Orange's creates — the a
-&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;This is where AI agents extend the capabilities of a FinOps team with two core benefits. They take on complex, time-intensive activities that previously needed a human, and they reduce friction around FinOps for individuals across the business.&
-&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;Getting teams to adopt them takes a strategy aimed at your own organization's pain points, which often come from high cognitive load, unclear accountability, or competing priorities. Start by finding where engagement drops off in your FinOps lif
-&lt;ul&gt;
-&lt;li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"&gt;
-&lt;p role="presentation"&gt;&lt;span style="vertical-align: baseline;"&gt;An awareness gap: If teams are unsure of their spend impact, an insight agent can push real-time cost data into their daily tools.&lt;/span&gt;&lt;/p&gt;
-&lt;/li&gt;
-&lt;li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"&gt;
-&lt;p role="presentation"&gt;&lt;span style="vertical-align: baseline;"&gt;A bandwidth gap: If engineers are too busy with backlogs, a remediation agent can identify quick wins and present them as ready-to-merge code changes.&lt;/span&gt;&lt;/p&gt;
-&lt;/li&gt;
-&lt;li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"&gt;
-&lt;p role="presentation"&gt;&lt;span style="vertical-align: baseline;"&gt;A complexity gap: If reporting feels like a manual chore, an orchestration agent can gather the data and simplify the process.&lt;/span&gt;&lt;/p&gt;
-&lt;/li&gt;
-&lt;/ul&gt;
-&lt;h2&gt;&lt;span style="vertical-align: baseline;"&gt;Start with trust, then add autonomy&lt;/span&gt;&lt;/h2&gt;
-&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;The sensible path runs in sequence. Establish the community practice, the way Orange did. Then introduce read-only agents that inform and suggest. Only once those are established across the community should you build agents that execute changes.
-&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;How you build depends on who's building. For teams that want to deploy quickly with minimal code, the &lt;/span&gt;&lt;a href="https://cloud.google.com/gemini-enterprise"&gt;&lt;span style="text-decoration: underline; vertical-align: baseline;"&
-&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;Cloud FinOps is moving beyond centralized reporting toward action that happens where the work does. The organizations getting there start with the culture, then use agents to carry it further than any one team could reach. &lt;/span&gt;&lt;/p&gt
-&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;Orange's numbers came out of the community work. Building that foundation is the part worth copying first. When you're ready to extend it, &lt;/span&gt;&lt;a href="https://cloud.google.com/consulting" rel="noopener" target="_blank"&gt;&lt;span s
+&lt;div class="block-paragraph"&gt;&lt;h3 data-block-key="rcfc5"&gt;&lt;b&gt;Now hear this: Podcasts from Google Cloud&lt;/b&gt;&lt;/h3&gt;&lt;ul&gt;&lt;li data-block-key="d67qn"&gt;&lt;b&gt;Cloud Security Podcast: Patching browsers with AI, agents, Rust, and your tabs&lt;/b&gt;: Jasika Bawa and Dou
&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;Gemini Enterprise helps organizations bring helpful, secure AI directly into the daily work of their employees. It moves teams past basic chat interactions to automating multi-step, end-to-end workflows with AI agents. It connects with the tools
&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;We see this recognition from Gartner as validation of our goal: creating a unified platform where everyone — from business users to developers — can work alongside AI agents to accomplish more together.&lt;/span&gt;&lt;/p&gt;&lt;/div&gt;
&lt;div class="block-image_full_width"&gt;
@@@ -631,7 +752,7 @@
&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;Instead of embedding raw Spanner table names and column assignments directly inside core DAO business logic, we isolate Spanner schema translation into dedicated converter units:&lt;/span&gt;&lt;/p&gt;&lt;/div&gt;
&lt;div class="block-code"&gt;&lt;dl&gt;
&lt;dt&gt;code_block&lt;/dt&gt;
- &lt;dd&gt;&amp;lt;ListValue: [StructValue([(&amp;#x27;code&amp;#x27;, &amp;#x27;// Example of the standardized pattern generated by our pipeline\r\n\r\ntype BpcTransferAmountsMutationConverter interface {\r\n ToInsertMutation(entity *model.BpcTransferAmount) (*spanner.Mutation, error)\r\n
+ &lt;dd&gt;&amp;lt;ListValue: [StructValue([(&amp;#x27;code&amp;#x27;, &amp;#x27;// Example of the standardized pattern generated by our pipeline\r\n\r\ntype BpcTransferAmountsMutationConverter interface {\r\n ToInsertMutation(entity *model.BpcTransferAmount) (*spanner.Mutation, error)\r\n
&lt;/dl&gt;&lt;/div&gt;
&lt;div class="block-paragraph_advanced"&gt;&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;By establishing a rigid, deterministic contract between the DAO and the Spanner SDK (&lt;/span&gt;&lt;span style="vertical-align: baseline;"&gt;spanner.Mutation&lt;/span&gt;&lt;span style="vertical-ali
&lt;h3&gt;&lt;span style="vertical-align: baseline;"&gt;Why use Antigravity&lt;/span&gt;&lt;span style="vertical-align: baseline;"&gt; &lt;/span&gt;&lt;span style="vertical-align: baseline;"&gt;CLI in headless mode?&lt;/span&gt;&lt;/h3&gt;
@@@ -696,7 +817,7 @@
&lt;/ul&gt;&lt;/div&gt;
&lt;div class="block-code"&gt;&lt;dl&gt;
&lt;dt&gt;code_block&lt;/dt&gt;
- &lt;dd&gt;&amp;lt;ListValue: [StructValue([(&amp;#x27;code&amp;#x27;, &amp;#x27;git clone https://github.com/google/mantis.git&amp;#x27;), (&amp;#x27;language&amp;#x27;, &amp;#x27;&amp;#x27;), (&amp;#x27;caption&amp;#x27;, &amp;lt;wagtail.rich_text.RichText object at 0x7fc0edb34450&amp;gt;)])]&a
+ &lt;dd&gt;&amp;lt;ListValue: [StructValue([(&amp;#x27;code&amp;#x27;, &amp;#x27;git clone https://github.com/google/mantis.git&amp;#x27;), (&amp;#x27;language&amp;#x27;, &amp;#x27;&amp;#x27;), (&amp;#x27;caption&amp;#x27;, &amp;lt;wagtail.rich_text.RichText object at 0x7f3cf7437250&amp;gt;)])]&a
&lt;/dl&gt;&lt;/div&gt;
&lt;div class="block-paragraph_advanced"&gt;&lt;ul&gt;
&lt;li aria-level="1" style="list-style-type: disc; vertical-align: baseline;"&gt;
@@@ -756,7 +877,7 @@
&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;Stay tuned for monthly updates on Google Cloud’s AI announcements, news, and best practices. For a deeper dive into the latest from Google Cloud customers, read our monthly recap, &lt;/span&gt;&lt;a href="https://cloud.google.com/blog/topics/cus
&lt;div class="block-aside"&gt;&lt;dl&gt;
&lt;dt&gt;aside_block&lt;/dt&gt;
- &lt;dd&gt;&amp;lt;ListValue: [StructValue([(&amp;#x27;title&amp;#x27;, &amp;#x27;$300 in free credit to try Google Cloud AI and ML&amp;#x27;), (&amp;#x27;body&amp;#x27;, &amp;lt;wagtail.rich_text.RichText object at 0x7fc0ed411810&amp;gt;), (&amp;#x27;btn_text&amp;#x27;, &amp;#x27;Start building
+ &lt;dd&gt;&amp;lt;ListValue: [StructValue([(&amp;#x27;title&amp;#x27;, &amp;#x27;$300 in free credit to try Google Cloud AI and ML&amp;#x27;), (&amp;#x27;body&amp;#x27;, &amp;lt;wagtail.rich_text.RichText object at 0x7f3cf70634d0&amp;gt;), (&amp;#x27;btn_text&amp;#x27;, &amp;#x27;Start building
&lt;/dl&gt;&lt;/div&gt;
&lt;div class="block-paragraph_advanced"&gt;&lt;hr/&gt;
&lt;h2 style="text-align: center;"&gt;&lt;span style="vertical-align: baseline;"&gt;July&lt;/span&gt;&lt;/h2&gt;
@@@ -2299,7 +2420,7 @@
&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;&lt;a href="https://cloud.google.com/ai/financial-services"&gt;&lt;span style="text-decoration: underline; vertical-align: baseline;"&gt;Gemini Enterprise for Financial Services&lt;/span&gt;&lt;/a&gt;&lt;span style="vertical-align: baseline;"&gt
&lt;div class="block-aside"&gt;&lt;dl&gt;
&lt;dt&gt;aside_block&lt;/dt&gt;
- &lt;dd&gt;&amp;lt;ListValue: [StructValue([(&amp;#x27;title&amp;#x27;, &amp;#x27;Get vital board insights with Google Cloud&amp;#x27;), (&amp;#x27;body&amp;#x27;, &amp;lt;wagtail.rich_text.RichText object at 0x7fc0ed77af50&amp;gt;), (&amp;#x27;btn_text&amp;#x27;, &amp;#x27;Visit the hub&amp;#x27
+ &lt;dd&gt;&amp;lt;ListValue: [StructValue([(&amp;#x27;title&amp;#x27;, &amp;#x27;Get vital board insights with Google Cloud&amp;#x27;), (&amp;#x27;body&amp;#x27;, &amp;lt;wagtail.rich_text.RichText object at 0x7f3cf6e7a350&amp;gt;), (&amp;#x27;btn_text&amp;#x27;, &amp;#x27;Visit the hub&amp;#x27
&lt;/dl&gt;&lt;/div&gt;
&lt;div class="block-paragraph"&gt;&lt;h3 data-block-key="hswvv"&gt;&lt;b&gt;How to stay strong with security fundamentals in the AI era&lt;/b&gt;&lt;/h3&gt;&lt;p data-block-key="eoh1k"&gt;&lt;i&gt;By Chris Betz, CISO, Google Cloud&lt;/i&gt;&lt;/p&gt;&lt;/div&gt;
&lt;div class="block-paragraph_with_image"&gt;&lt;div class="article-module h-c-page"&gt;
@@@ -2380,12 +2501,12 @@
&lt;p&gt;&lt;span style="vertical-align: baseline;"&gt;To learn more about building and maintaining strong security foundations in the AI era, read our newest &lt;/span&gt;&lt;a href="https://cloud.google.com/security/resources/cyber-snapshot-reports"&gt;&lt;span style="text-decoration: underline; v
&lt;div class="block-aside"&gt;&lt;dl&gt;
&lt;dt&gt;aside_block&lt;/dt&gt;
- &lt;dd&gt;&amp;lt;ListValue: [StructValue([(&amp;#x27;title&amp;#x27;, &amp;#x27;Learn something new&amp;#x27;), (&amp;#x27;body&amp;#x27;, &amp;lt;wagtail.rich_text.RichText object at 0x7fc0edfc0dd0&amp;gt;), (&amp;#x27;btn_text&amp;#x27;, &amp;#x27;Watch now&amp;#x27;), (&amp;#x27;href&amp;#x2
+ &lt;dd&gt;&amp;lt;ListValue: [StructValue([(&amp;#x27;title&amp;#x27;, &amp;#x27;Learn something new&amp;#x27;), (&amp;#x27;body&amp;#x27;, &amp;lt;wagtail.rich_text.RichText object at 0x7f3cf6f2a450&amp;gt;), (&amp;#x27;btn_text&amp;#x27;, &amp;#x27;Watch now&amp;#x27;), (&amp;#x27;href&amp;#x2
&lt;/dl&gt;&lt;/div&gt;
&lt;div class="block-paragraph"&gt;&lt;h3 data-block-key="4bd61"&gt;&lt;b&gt;In case you missed it&lt;/b&gt;&lt;/h3&gt;&lt;p data-block-key="5tvtn"&gt;Here are the latest updates, products, services, and resources from our security teams so far this month:&lt;/p&gt;&lt;ul&gt;&lt;li data-block-key="4
&lt;div class="block-aside"&gt;&lt;dl&gt;
&lt;dt&gt;aside_block&lt;/dt&gt;
- &lt;dd&gt;&amp;lt;ListValue: [StructValue([(&amp;#x27;title&amp;#x27;, &amp;#x27;Join the Google Cloud CISO Community&amp;#x27;), (&amp;#x27;body&amp;#x27;, &amp;lt;wagtail.rich_text.RichText object at 0x7fc0edba1cd0&amp;gt;), (&amp;#x27;btn_text&amp;#x27;, &amp;#x27;Learn more&amp;#x27;), (&amp
+ &lt;dd&gt;&amp;lt;ListValue: [StructValue([(&amp;#x27;title&amp;#x27;, &amp;#x27;Join the Google Cloud CISO Community&amp;#x27;), (&amp;#x27;body&amp;#x27;, &amp;lt;wagtail.rich_text.RichText object at 0x7f3cf6db5f90&amp;gt;), (&amp;#x27;btn_text&amp;#x27;, &amp;#x27;Learn more&amp;#x27;), (&amp
&lt;/dl&gt;&lt;/div&gt;
&lt;div class="block-paragraph"&gt;&lt;h3 data-block-key="29tyz"&gt;&lt;b&gt;Threat Intelligence news&lt;/b&gt;&lt;/h3&gt;&lt;ul&gt;&lt;li data-block-key="cm2sc"&gt;&lt;b&gt;Staying ahead of adversarial AI through agentic source code review&lt;/b&gt;: To help defenders implement agentic approaches s
&lt;div class="block-paragraph"&gt;&lt;h3 data-block-key="rcfc5"&gt;&lt;b&gt;Now hear this: Podcasts from Google Cloud&lt;/b&gt;&lt;/h3&gt;&lt;ul&gt;&lt;li data-block-key="drbpp"&gt;&lt;b&gt;Cloud Security Podcast: All about Project Atlas, Wiz's AI vulnerability research&lt;/b&gt;: Near Orfeld, head

Diff display stops at 400 lines. The line counts above are from the whole diff. 81 lines shown here cut at 300 characters. The raw artifact at this commit is linked above.