Mandiant (part of Google Cloud)

We’re determined to make organizations secure against cyber threats and confident in their readiness.

[Mandiant (part of Google Cloud) @Mandiant]

Read the latest AI Threat Tracker report here: https://t.co/HQDLagbwpx

[Mandiant (part of Google Cloud) @Mandiant]

🔓 Threat actors are using AI to bypass defenses.

Join Google Threat Intelligence Group analysts for a deep-dive into the AI-powered kill chain and the speed of modern attacks.

🔗: https://t.co/sFBEepm677

[Google Cloud Security @GoogleCloudSec]

AI-driven attacks require machine-speed security.

Google AI Threat Defense is a multi-AI autonomous, continuous security platform. It fuses Gemini reasoning power, Wiz risk prioritization, CodeMender code remediation and Mandiant expertise.

Read more: https://t.co/XG2mOLJ5Zo

[Mandiant (part of Google Cloud) @Mandiant]

Abusing LOLBins is a primary vector for stealthy attacks.

Hunt them down using automated behavior telemetry in Google TI! 🛡️💻
#GoogleTIMondays

[Mandiant (part of Google Cloud) @Mandiant]

Gartner just released their first Gartner® Magic Quadrant™ for Cyberthreat Intelligence Technologies and Google Threat Intelligence was recognized as a Leader. → https://t.co/lG8AFiRaV0

[Mandiant (part of Google Cloud) @Mandiant]

Hunting cross-compiled MIPS/ARM malware?

Use Google TI advanced searches to reveal edge threats.

Learn how to refine your searches with the Advanced searches documentation: https://t.co/7tlRvMLgQZ

#GoogleTIMonday

[Mandiant (part of Google Cloud) @Mandiant]

UNC6671, a threat actor operating under the "BlackFile" brand, leverages vishing and adversary-in-the-middle to bypass multi-factor authentication.

The group targets Microsoft 365 and Okta environments for programmatic data exfiltration.

🔗 https://t.co/af23fP3Wk2

[Mandiant (part of Google Cloud) @Mandiant]

Discover our full catalog of Mandiant Academy courses: https://t.co/6vn7vSNjfM

[Mandiant (part of Google Cloud) @Mandiant]

Cybersecurity training hits different when it’s built from real-world incident response.

Mandiant Academy courses are grounded in real-time threat intel and adversary methodologies that our incident response teams see every day.

🎥 What to expect from June’s Fundamentals class:

[Mandiant (part of Google Cloud) @Mandiant]

"Copy Fail" (CVE-2026-31431) escapes containers in 732 bytes. Hunt it with Agentic AI and Advanced Searches.

Learn more about operating Agentic AI to analyze threats here: https://t.co/B8rqYMbSYa

#GoogleTIMondays 🛡️ #ThreatIntelligence #AgenticAI

[Mandiant (part of Google Cloud) @Mandiant]

AI isn’t just a tool for attackers; it’s a target.

Our latest report shows how adversaries use AI to build exploits and target AI infrastructure for initial access.

🔗 https://t.co/frgrxCzBk9

[Mandiant (part of Google Cloud) @Mandiant]

Melbourne cyber pros: Join us at Google Melbourne for Mandiant Community Night!

Explore a software engineering approach to threat detection (CD/CR) with our frontline experts to reduce alert toil.

Space is limited. RSVP by May 12: https://t.co/jbOYg5R82a

[Mandiant (part of Google Cloud) @Mandiant]

Traditional debugging hasn't evolved in decades. Tune in to Behind the Binary to hear Xusheng explain why Time Travel Debugging is the paradigm shift the industry has been waiting for.

Listen on Apple Podcasts: https://t.co/iQtkSSjJkt

[Mandiant (part of Google Cloud) @Mandiant]

See what’s possible: We’re using agentic AI to turn dark web data into YARA rules for web shells. 🛡️ Don't just watch, hunt.

🔗 To get started with the Agentic Platform check out the documentation here: https://t.co/gF7i8HxBQ3

#GoogleTIMondays 🤖 🚀

[Mandiant (part of Google Cloud) @Mandiant]

🔄 Threat actors regularly re-emerge under different identities.

New agentic capabilities in Google Threat Intelligence and the dark web monitoring module streamline investigations, linking multi-alias actors and mapping operations.

🔗 Learn more: https://t.co/z8wDOQiBkk

[Mandiant (part of Google Cloud) @Mandiant]

It’s tomorrow! 🚨

AI is collapsing the window between vulnerability discovery and exploitation.

Join John Hultquist (Chief Analyst, Google Threat Intelligence Group) & Paul Mudgett (Senior Manager, Mandiant) to learn how to respond.

Register: https://t.co/0ICGIu78cK

[Mandiant (part of Google Cloud) @Mandiant]

Read these blog posts for more information:

IPIDEA: https://t.co/vRn8sCtArS

GRIDTIDE: https://t.co/reBpAKvKMm

[Mandiant (part of Google Cloud) @Mandiant]

What does it take to disrupt cyber threats at scale?

Luke McNamara and GTIG disruption lead Charley Snyder discuss how Google is disrupting adversary operations. Learn about the team, and lessons from recent disruptions: IPIDEA & GRIDTIDE.

Listen now: https://t.co/bPjCrB4sSH

[Mandiant (part of Google Cloud) @Mandiant]

UNC6692 is impersonating IT helpdesk employees on Microsoft Teams to deploy custom malware.

The SNOW ecosystem (SNOWBELT, SNOWGLAZE, SNOWBASIN) enables deep network penetration and exfiltration. Read the analysis and get indicators of compromise.

➡️ https://t.co/vnHZVuNWi2

[Mandiant (part of Google Cloud) @Mandiant]

Hunt PowerShell & VBS like a pro! Use Agentic AI to unmask threats.

Find these in Google TI saved searches via tag:GoogleTIMondays

#GoogleTIMondays