Anton Chuvakin

Google Cloud Security Threat Horizons Report #13 (H1 2026) Is Out! This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our next Cloud…

"Google Cloud Security Threat Horizons Report #13 (H1 2026) Is Out!" medium.com/anton-on-sec... <- read my fun highlights , then read the entire report?

My Really Fun RSA 2026 Presentations! This blog is perhaps a little bit more like an ad, so if you don’t want to check the ads, consider not reading it.

"My Really Fun RSA 2026 Presentations!" #RSAC #RSA2026 medium.com/anton-on-sec... <- shadow agents, AI SOC, Google security lessons (and AI), very fun!

Check out Episode 257 of the Google Cloud Security Podcast: "Beyond the 'Kaboom': What Actually Breaks When OT Meets the Cloud?" hosted by @anton1chuvakin.bsky.social and Tim Peacock and featuring yours truly.

cloud.withgoogle.com/cloudsecurit...

Or

youtu.be/XJqWbpKHLDs?...

"Beyond “Is Your #SOC #AI Ready?” Plan the Journey!" medium.com/anton-on-sec... <- a long promised Part 2 for preparing your SOC for the arrive of AI capabilities.

"Beyond “Is Your #SOC #AI Ready?” Plan the Journey!" medium.com/anton-on-sec... <- a long promised Part 2 for preparing your SOC for the arrive of AI capabilities.

Office of the CISO 2025 Year in Review: 3 Key AI Security & Governance Themes | Community Co-Author: Anton ChuvakinSimilar to our 2024 AI blog recap, as we reflected on the customer conversations we had in 2025 and the blogs we’ve written, 3 key themes emerged. The common thread woven…

"Office of the CISO 2025 Year in Review: 3 Key AI Security & Governance Themes" security.googlecloudcommunity.com/ciso-blog-77... <- our team (Office of the CISO at Google Cloud) recap of 2025 AI security discussions and writing

Office of the CISO 2025 Year in Review: 3 Key AI Security & Governance Themes | Community Co-Author: Anton ChuvakinSimilar to our 2024 AI blog recap, as we reflected on the customer conversations we had in 2025 and the blogs we’ve written, 3 key themes emerged. The common thread woven…

"Office of the CISO 2025 Year in Review: 3 Key AI Security & Governance Themes" security.googlecloudcommunity.com/ciso-blog-77... <- our team (Office of the CISO at Google Cloud) recap of 2025 AI security discussions and writing

2025 Year in Review at Cloud Security Podcast by Google (written jointly with Tim Peacock)

"2025 Year in Review at Cloud Security Podcast by Google" medium.com/anton-on-sec... <- Tim and me reflect on our favorite podcast episodes this year!

Anton’s Security Blog Quarterly Q4 2025 Amazingly, Medium has fixed the stats so my blog / podcast quarterly is back to life. As before, this covers both Anton on Security and my…

"Anton’s Security Blog Quarterly Q4 2025" medium.com/anton-on-sec... <- my usual "quarterly-ish" summary of recent and popular blogs, podcasts and other materials. Enjoy!

2025 Year in Review at Cloud Security Podcast by Google (written jointly with Tim Peacock)

"2025 Year in Review at Cloud Security Podcast by Google" medium.com/anton-on-sec... <- Tim and me reflect on our favorite podcast episodes this year!

Anton’s Security Blog Quarterly Q4 2025 Amazingly, Medium has fixed the stats so my blog / podcast quarterly is back to life. As before, this covers both Anton on Security and my…

"Anton’s Security Blog Quarterly Q4 2025" medium.com/anton-on-sec... <- my usual "quarterly-ish" summary of recent and popular blogs, podcasts and other materials. Enjoy!

EP256 Rewiring Democracy & Hacking Trust: Bruce Schneier on the AI Offense-Defense Balance cloud.withgoogle.com/cloudsecurit... <- the last podcast of 2025 we just aired. See you in 2026!

"Implementing Secure AI Framework (#SAIF) Controls in Google Cloud" security.googlecloudcommunity.com/ciso-blog-77... <- this blog launches a new paper on SAIF #AI controls in Google Cloud. More useful than fun, admittedly :-)

How Google Does It: Securing production services, servers, and workloads | Google Cloud Blog Here are the three core pillars that define how we protect production workloads at Google-scale.

"How Google Does It: Securing production services, servers, and workloads" cloud.google.com/transform/ho... <- another post in this fun series!

The Agentic SOC: Humans, Agents, and the Future of Defense | Community In the ever-evolving world of cybersecurity, we’ve learned to live with a constant churn of buzzwords. Remember the good old days of "Big Data," "Next-Gen" everything, and the brief, bright explosion…

So this one is *a bit* self promotional but we are doing a very fun #AI #SOC webinar with Allie Mellen and I think you should listen in :-) security.googlecloudcommunity.com/ciso-blog-77...

How Google Does It: Collecting and analyzing cloud forensics | Google Cloud Blog Here’s how Google’s Incident Management and Digital Forensics team gathers and analyzes digital evidence.

"How Google Does It: Collecting and analyzing cloud forensics" cloud.google.com/transform/ho... <- the next HGD blog in our series, very fun (because cloud forensics!)

EP256 Rewiring Democracy & Hacking Trust: Bruce Schneier on the AI Offense-Defense Balance cloud.withgoogle.com/cloudsecurit... <- the last podcast of 2025 we just aired. See you in 2026!

"Implementing Secure AI Framework (#SAIF) Controls in Google Cloud" security.googlecloudcommunity.com/ciso-blog-77... <- this blog launches a new paper on SAIF #AI controls in Google Cloud. More useful than fun, admittedly :-)

How Google Does It: Securing production services, servers, and workloads | Google Cloud Blog Here are the three core pillars that define how we protect production workloads at Google-scale.

"How Google Does It: Securing production services, servers, and workloads" cloud.google.com/transform/ho... <- another post in this fun series!

The Agentic SOC: Humans, Agents, and the Future of Defense | Community In the ever-evolving world of cybersecurity, we’ve learned to live with a constant churn of buzzwords. Remember the good old days of "Big Data," "Next-Gen" everything, and the brief, bright explosion…

So this one is *a bit* self promotional but we are doing a very fun #AI #SOC webinar with Allie Mellen and I think you should listen in :-) security.googlecloudcommunity.com/ciso-blog-77...

250 Episodes of Cloud Security Podcast by Google: From Confidential Computing to AI-Ready SOC So this may suck, but I am hoping to at least earn some points for honesty here. I wanted to write something pithy and smart once I…

"250 Episodes of Cloud Security Podcast by Google: From Confidential Computing to AI-Ready SOC" medium.com/anton-on-sec... (cc @CloudSecPodcast)

How Google Does It: Network security in a nutshell | Google Cloud Blog At Google, we consider our fundamental network security perimeters to be state-of-the-art, in part because they rely on defense in depth. Here’s our approach.

"How Google Does It: Network security in a nutshell" cloud.google.com/transform/ho... <- this is another fun blog in how HGD series, this time about netsec. Also, take a look at the author names.... YES, REALLY!

The Big Idea: Security Assurance is NOT Just QA for AI! | Community Think of quality assurance (QA) for products. Security assurance plays a similar, yet distinct, role for systems and applications and, yes, now also for AI. It's all about building high confidence…

"The Big Idea: Security Assurance is NOT Just QA for AI!" security.googlecloudcommunity.com/ciso-blog-77... <- this has the Cliff's notes; full paper if you can handle it: research.google/pubs/securit...

The Big Idea: Security Assurance is NOT Just QA for AI! | Community Think of quality assurance (QA) for products. Security assurance plays a similar, yet distinct, role for systems and applications and, yes, now also for AI. It's all about building high confidence…

"The Big Idea: Security Assurance is NOT Just QA for AI!" security.googlecloudcommunity.com/ciso-blog-77... <- this has the Cliff's notes; full paper if you can handle it: research.google/pubs/securit...

250 Episodes of Cloud Security Podcast by Google: From Confidential Computing to AI-Ready SOC So this may suck, but I am hoping to at least earn some points for honesty here. I wanted to write something pithy and smart once I…

"250 Episodes of Cloud Security Podcast by Google: From Confidential Computing to AI-Ready SOC" medium.com/anton-on-sec... (cc @CloudSecPodcast)

How Google Does It: Threat modeling, from basics to AI | Google Cloud Blog Threat modeling plays a critical role at Google in how we detect and respond to threats — and secure our use of the public cloud.

"How Google Does It: Threat modeling, from basics to AI" cloud.google.com/transform/ho... <- another HGD blog, very fun, and yes, with some details omitted :-)

Simple to Ask: Is Your SOC AI Ready? Not Simple to Answer! In early 1900s, factory owners bolted the new electric dynamo onto their old, central-shaft-and-pulley systems. They thought they were…

"Simple to Ask: Is Your #SOC #AI Ready? Not Simple to Answer!" medium.com/anton-on-sec... <- How to tell if your SOC is ready for AI? A simple 5 point framework :-)

How Google Does It: Building AI agents for cybersecurity and defense | Google Cloud Blog At Google, we’ve moved from talking about AI agents to actively using them for security. Here are four critical lessons that helped shape our approach.

"How Google Does It: Building #AI agents for cybersecurity and defense" cloud.google.com/transform/ho... <- another fun blog in our series on how Google does security; this time ... AI AGENTS! Enjoy!

10 Tips for Governing AI Agents | Community Co-Author: Marina KaganovichThe rapid evolution from generative artificial intelligence, commonly known as genAI, to agentic AI is a stark reminder to organizations to prioritize “going back to…

"10+ Tips for Governing #AI Agents" security.googlecloudcommunity.com/community-bl... <- this is a bit dense (so perhaps not fun?) but kinda useful and stems from MANY painful conversations on this topic....

How Google Does It: Building AI agents for cybersecurity and defense | Google Cloud Blog At Google, we’ve moved from talking about AI agents to actively using them for security. Here are four critical lessons that helped shape our approach.

"How Google Does It: Building #AI agents for cybersecurity and defense" cloud.google.com/transform/ho... <- another fun blog in our series on how Google does security; this time ... AI AGENTS! Enjoy!