Loading story…
Palo Alto Networks and Google Cloud have announced an expanded, multibillion-dollar partnership aimed at embedding advanced security capabilities directly into Google Cloud’s AI and infrastructure services. The agreement, reportedly valued at nearly $10 billion over several years, will see Palo Alto Networks’ Prisma AIRS platform integrated with Google Cloud offerings such as Vertex AI and Agent Engine, providing end-to-end protection for AI workloads, data, and development tools. This collaboration is a response to the increasing frequency of attacks on AI infrastructure, with Palo Alto Networks reporting that 99% of surveyed organizations experienced at least one attack on their AI systems in the past year.
The partnership is designed to address the complexity of securing hybrid and multicloud environments as enterprises rapidly scale AI deployments. By aligning Palo Alto’s network and AI security solutions with Google Cloud’s infrastructure, the companies aim to deliver a unified security experience, reduce operational complexity, and ensure consistent enforcement of security policies. The deal also involves Palo Alto Networks migrating key internal workloads to Google Cloud, further deepening the strategic relationship between the two firms.
Track how attackers are adapting to this technology.
4 events from the most recent confirmed update back to the earliest known activity.
Subsequent reporting and financial filing details showed Palo Alto’s Google Cloud purchase commitments are expected to rise to about $2.5 billion for 2031 and beyond, while 2027 commitments were revised downward. These disclosures provided more concrete insight into the long-term structure of the expanded partnership.
Palo Alto Networks said it will move key internal workloads onto Google Cloud under the new agreement. Later reporting indicated the company’s cloud purchase commitments would ramp up significantly in future years, underscoring the scale of the migration and commercial relationship.
As part of the expanded partnership, the companies said they would integrate Prisma AIRS with Google Cloud services such as Vertex AI and Agent Engine, while also deepening support for VM-Series firewalls, SASE, and Prisma Access. The goal is to provide a more unified security experience across AI, cloud, and multi-cloud environments.
Palo Alto Networks and Google Cloud announced an expanded multibillion-dollar partnership to embed Palo Alto security technologies more deeply into Google Cloud’s AI and infrastructure stack. The agreement, reportedly worth nearly $10 billion over several years, focuses on securing AI workloads and broader cloud deployments.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
3 references tracked. Mallory keeps watching after this page renders.
go.theregister.com
Open sourcetechrepublic.com
Open sourcebankinfosecurity.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Google Cloud unveiled an **agentic defense** strategy that combines **Wiz**, **Gemini**, **Mandiant**, and **Google Security Operations** to automate threat detection, investigation, and remediation. The company said the approach is designed to counter attackers' growing use of AI, citing Mandiant data showing the average time from initial breach to access handoff has fallen to **22 seconds**. Google also tied the strategy to broader code and application security efforts, including **CodeMender**, an AI agent for code security, and new protections such as **Wiz AI Application Protection Platform** and **AI-BOM**. The announcement places Google more directly in the fast-growing market for AI-driven and agentic SOC platforms, where vendors including **CrowdStrike**, **Microsoft**, **Palo Alto Networks**, and **SentinelOne** are also pushing automation-heavy security operations. Google said it has integrated Wiz attack surface management with Google Threat Intelligence and added SecOps agents for triage, threat hunting, and detection engineering, while rivals such as CrowdStrike are promoting **agentic MDR** and an **agentic SOC** model to help enterprises scale managed detection and response.
Jul 17, 2026
Google has introduced Private AI Compute, a privacy-enhancing technology designed to process AI queries securely in the cloud while maintaining on-device-level privacy guarantees. The system leverages Trillium TPUs and Titanium Intelligence Enclaves, utilizing AMD-based Trusted Execution Environments (TEEs) to encrypt and isolate memory, ensuring that user data remains inaccessible to Google and protected from physical exfiltration attacks. The infrastructure supports mutual attestation and encrypted communication between trusted nodes, with strict controls to prevent unauthorized access and ensure that only validated workloads are executed. To assess the security of this new platform, Google engaged NCC Group for a comprehensive review, including architectural analysis and detailed cryptographic assessments of key components such as the Oak Session Library, attestation mechanisms, and the T-Log system. The review also covered configuration and source code analysis to evaluate the robustness of the system's privacy and security controls. This independent evaluation highlights Google's efforts to provide strong privacy assurances for cloud-based AI processing, addressing concerns about data confidentiality and integrity in modern cloud environments.
Jun 29, 2026
Palo Alto Networks Unit 42 disclosed a weakness in **Google Cloud Vertex AI** that could let attacker-controlled AI agents extract credentials from the platform’s Per-Project, Per-Product Service Agent (`P4SA`) and use them to access customer resources. The issue affects deployments built with the **Agent Development Kit** through **Agent Engine**, where excessive default permissions weakened isolation between the AI agent runtime and the customer’s Google Cloud project. Researchers said exposed service-agent credentials could be abused to gain broad read access to **Google Cloud Storage** data and to view restricted Google-owned **Artifact Registry** repositories linked to Vertex AI infrastructure. Unit 42 said the flaw also exposed details about internal Google infrastructure and potentially proprietary code associated with the **Vertex AI Reasoning Engine**. Researchers further warned that insecure Python `pickle` usage and broad, non-editable **OAuth 2.0** scopes could expand the blast radius beyond GCP into **Google Workspace** services such as Gmail, Google Calendar, and Google Drive. Google responded by updating its guidance and urging customers to adopt **Bring Your Own Service Account (BYOSA)** and least-privilege controls to reduce the risk.
Jun 29, 2026