Breaking the Patch Sound Barrier: Your Vulnerability Remediation Will Not Keep Up With AI Exploit… Many years ago while at Gartner, I wrote a blog post where I defined the concept of the “Patch Sound Barrier.” (original via Archive if you…

"Breaking the Patch Sound Barrier: Your Vulnerability Remediation Will Not Keep Up With AI Exploit Speed. So?" medium.com/anton-on-sec... <- a "warm" take on vuln mgt in 2026.

RSA 2026: Agentic Future, Analog Fundamentals — The Paradox of Why the Old Guard Still Survives OK, RSA 2026 is over. If my record keeping is correct, I first attended RSA in 2006. At that time, I was annoyed by … AI? XDR? NIDS? ……

"RSA 2026: Agentic Future, Analog Fundamentals — The Paradox of Why the Old Guard Still Survives" medium.com/anton-on-sec... <- the classic! My annual #RSAC #RSA2026 reflection post!

AI SOC vendors are selling a future that production deployments haven't reached yet - Help Net Security AI SOC vendor claims don't match what practitioners see in production. A report documents the gap between marketing and incident performance.

AI SOC vendors are selling a future that production deployments haven’t reached yet

📖 Read more: www.helpnetsecurity.com/2026/03/26/f...

#cybersecurity #cybersecuritynews #agenticAI #SOC #automation #securityoperations @anton1chuvakin.bsky.social @cyberfuturists.com @aunooai.bsky.social

These 4 AI governance tips help counter shadow agents | Google Cloud Blog It’s not easy to stop employees from using shadow agents, but these 4 tips on robust AI governance can make the shadows less appealing.

"These 4 AI governance tips help counter shadow agents" cloud.google.com/transform/th... <- high level admittedly, but fun! See you at #RSAC #RSA2026

Anton’s Vibe Coding Experience: A Reflection on Risk Decisions Look, I’m not a developer, and the last time I truly “wrote code” was probably a good number of years ago (and it was probably Perl so you…

"Anton’s Vibe Coding Experience: A Reflection on Risk Decisions" medium.com/anton-on-sec... <- security musings I got while vibe coding an app; read for entertainment, this is NOT security advice :-)

Community Contest: Create and Share Your Security Gemini Gems | Community Create and Share Your Security Gemini Gems We're launching a new Community challenge, and this time you not only have a chance to win Google swag, but to also be featured on the Google Cloud Security…

"Community Contest: Create and Share Your Security Gemini Gems" security.googlecloudcommunity.com/news-announc... <- share your security-focused Gemini Gems, win prizes!

Google Cloud Security Threat Horizons Report #13 (H1 2026) Is Out! This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our next Cloud…

"Google Cloud Security Threat Horizons Report #13 (H1 2026) Is Out!" medium.com/anton-on-sec... <- read my fun highlights , then read the entire report?

My Really Fun RSA 2026 Presentations! This blog is perhaps a little bit more like an ad, so if you don’t want to check the ads, consider not reading it.

"My Really Fun RSA 2026 Presentations!" #RSAC #RSA2026 medium.com/anton-on-sec... <- shadow agents, AI SOC, Google security lessons (and AI), very fun!

Check out Episode 257 of the Google Cloud Security Podcast: "Beyond the 'Kaboom': What Actually Breaks When OT Meets the Cloud?" hosted by @anton1chuvakin.bsky.social and Tim Peacock and featuring yours truly.

cloud.withgoogle.com/cloudsecurit...

Or

youtu.be/XJqWbpKHLDs?...

"Beyond “Is Your #SOC #AI Ready?” Plan the Journey!" medium.com/anton-on-sec... <- a long promised Part 2 for preparing your SOC for the arrive of AI capabilities.

"Beyond “Is Your #SOC #AI Ready?” Plan the Journey!" medium.com/anton-on-sec... <- a long promised Part 2 for preparing your SOC for the arrive of AI capabilities.

Office of the CISO 2025 Year in Review: 3 Key AI Security & Governance Themes | Community Co-Author: Anton ChuvakinSimilar to our 2024 AI blog recap, as we reflected on the customer conversations we had in 2025 and the blogs we’ve written, 3 key themes emerged. The common thread woven…

"Office of the CISO 2025 Year in Review: 3 Key AI Security & Governance Themes" security.googlecloudcommunity.com/ciso-blog-77... <- our team (Office of the CISO at Google Cloud) recap of 2025 AI security discussions and writing

Office of the CISO 2025 Year in Review: 3 Key AI Security & Governance Themes | Community Co-Author: Anton ChuvakinSimilar to our 2024 AI blog recap, as we reflected on the customer conversations we had in 2025 and the blogs we’ve written, 3 key themes emerged. The common thread woven…

"Office of the CISO 2025 Year in Review: 3 Key AI Security & Governance Themes" security.googlecloudcommunity.com/ciso-blog-77... <- our team (Office of the CISO at Google Cloud) recap of 2025 AI security discussions and writing

2025 Year in Review at Cloud Security Podcast by Google (written jointly with Tim Peacock)

"2025 Year in Review at Cloud Security Podcast by Google" medium.com/anton-on-sec... <- Tim and me reflect on our favorite podcast episodes this year!

Anton’s Security Blog Quarterly Q4 2025 Amazingly, Medium has fixed the stats so my blog / podcast quarterly is back to life. As before, this covers both Anton on Security and my…

"Anton’s Security Blog Quarterly Q4 2025" medium.com/anton-on-sec... <- my usual "quarterly-ish" summary of recent and popular blogs, podcasts and other materials. Enjoy!

2025 Year in Review at Cloud Security Podcast by Google (written jointly with Tim Peacock)

"2025 Year in Review at Cloud Security Podcast by Google" medium.com/anton-on-sec... <- Tim and me reflect on our favorite podcast episodes this year!

Anton’s Security Blog Quarterly Q4 2025 Amazingly, Medium has fixed the stats so my blog / podcast quarterly is back to life. As before, this covers both Anton on Security and my…

"Anton’s Security Blog Quarterly Q4 2025" medium.com/anton-on-sec... <- my usual "quarterly-ish" summary of recent and popular blogs, podcasts and other materials. Enjoy!

EP256 Rewiring Democracy & Hacking Trust: Bruce Schneier on the AI Offense-Defense Balance cloud.withgoogle.com/cloudsecurit... <- the last podcast of 2025 we just aired. See you in 2026!

"Implementing Secure AI Framework (#SAIF) Controls in Google Cloud" security.googlecloudcommunity.com/ciso-blog-77... <- this blog launches a new paper on SAIF #AI controls in Google Cloud. More useful than fun, admittedly :-)

How Google Does It: Securing production services, servers, and workloads | Google Cloud Blog Here are the three core pillars that define how we protect production workloads at Google-scale.

"How Google Does It: Securing production services, servers, and workloads" cloud.google.com/transform/ho... <- another post in this fun series!

The Agentic SOC: Humans, Agents, and the Future of Defense | Community In the ever-evolving world of cybersecurity, we’ve learned to live with a constant churn of buzzwords. Remember the good old days of "Big Data," "Next-Gen" everything, and the brief, bright explosion…

So this one is *a bit* self promotional but we are doing a very fun #AI #SOC webinar with Allie Mellen and I think you should listen in :-) security.googlecloudcommunity.com/ciso-blog-77...

How Google Does It: Collecting and analyzing cloud forensics | Google Cloud Blog Here’s how Google’s Incident Management and Digital Forensics team gathers and analyzes digital evidence.

"How Google Does It: Collecting and analyzing cloud forensics" cloud.google.com/transform/ho... <- the next HGD blog in our series, very fun (because cloud forensics!)

EP256 Rewiring Democracy & Hacking Trust: Bruce Schneier on the AI Offense-Defense Balance cloud.withgoogle.com/cloudsecurit... <- the last podcast of 2025 we just aired. See you in 2026!

"Implementing Secure AI Framework (#SAIF) Controls in Google Cloud" security.googlecloudcommunity.com/ciso-blog-77... <- this blog launches a new paper on SAIF #AI controls in Google Cloud. More useful than fun, admittedly :-)

How Google Does It: Securing production services, servers, and workloads | Google Cloud Blog Here are the three core pillars that define how we protect production workloads at Google-scale.

"How Google Does It: Securing production services, servers, and workloads" cloud.google.com/transform/ho... <- another post in this fun series!

The Agentic SOC: Humans, Agents, and the Future of Defense | Community In the ever-evolving world of cybersecurity, we’ve learned to live with a constant churn of buzzwords. Remember the good old days of "Big Data," "Next-Gen" everything, and the brief, bright explosion…

So this one is *a bit* self promotional but we are doing a very fun #AI #SOC webinar with Allie Mellen and I think you should listen in :-) security.googlecloudcommunity.com/ciso-blog-77...

250 Episodes of Cloud Security Podcast by Google: From Confidential Computing to AI-Ready SOC So this may suck, but I am hoping to at least earn some points for honesty here. I wanted to write something pithy and smart once I…

"250 Episodes of Cloud Security Podcast by Google: From Confidential Computing to AI-Ready SOC" medium.com/anton-on-sec... (cc @CloudSecPodcast)

How Google Does It: Network security in a nutshell | Google Cloud Blog At Google, we consider our fundamental network security perimeters to be state-of-the-art, in part because they rely on defense in depth. Here’s our approach.

"How Google Does It: Network security in a nutshell" cloud.google.com/transform/ho... <- this is another fun blog in how HGD series, this time about netsec. Also, take a look at the author names.... YES, REALLY!

The Big Idea: Security Assurance is NOT Just QA for AI! | Community Think of quality assurance (QA) for products. Security assurance plays a similar, yet distinct, role for systems and applications and, yes, now also for AI. It's all about building high confidence…

"The Big Idea: Security Assurance is NOT Just QA for AI!" security.googlecloudcommunity.com/ciso-blog-77... <- this has the Cliff's notes; full paper if you can handle it: research.google/pubs/securit...

The Big Idea: Security Assurance is NOT Just QA for AI! | Community Think of quality assurance (QA) for products. Security assurance plays a similar, yet distinct, role for systems and applications and, yes, now also for AI. It's all about building high confidence…

"The Big Idea: Security Assurance is NOT Just QA for AI!" security.googlecloudcommunity.com/ciso-blog-77... <- this has the Cliff's notes; full paper if you can handle it: research.google/pubs/securit...