Cisco's Relentless Defense Report examines how security practitioners are adapting as AI reshapes the global threat landscape.

Anton’s Security Blog Quarterly now again covers Anton on Security only. It no longer includes my posts from Google Cloud blog, Google…

Back in my analyst days, I built maturity models for a SOC (2018), a SIEM (2018), vulnerability management (2017) and threat intel (201?)…

A few weeks ago I asked on X and LinkedIn a deceptively simple question: which “security basics” matter more against AI-armed attackers…

(by Anton Chuvakin & Usman Chaudhary)

In Part 1 of this series, we dumped a pile of uncomfortable questions on you and promised answers. In Part 2 of the series, we talked about…

The Feynman Betting Strategy and the Inertia of Security

This is Part 3 of the AI-ready SOC series (Part 1, Part 2), and it is focused on validating readiness for pillars #1 (SOC Data Foundations)…

Lately, I’ve been reading a lot of insightful posts related to best practices in SIEM, detection, and logs (written in 2026). The…

(with key ideas from Augusto Barros)

Developed together with Usman Chaudhary @ Google for Public Sector (his post)

If you look at social media debates about AI, two extreme patterns emerge. Studying extreme patterns is very useful because understanding…

For 15 years (!), many of us who have touched cloud security have struggled with the shared responsibility model for cloud security. As…

My Anton’s Security Blog Quarterly covers both Anton on Security and my posts from Google Cloud blog, Google Cloud community blog, and our…

One particular aspect of an agentic or AI-powered SOC (but NOT “humanless SOC”) has bothered me over the last few months: specifically, the…

Many years ago while at Gartner, I wrote a blog post where I defined the concept of the “Patch Sound Barrier.” (original via Archive if you…

Author: Anton Chuvakin, Office of the CISO I’ve been banging the drum about SIEM migration for a long time. If you’ve followed my work since the Gartner days (or even the "Security Warrior" era), you…

So, you read my previous blog post about breaking the patch sound barrier, but it left you wanting more? Well, this is that “more.”

Authors:Marina Kaganovich, Office of the CISO.Anton Chuvakin, Office of the CISO Introduction“AI governance” is a term that is often too narrowly focused on the technological shift genAI has spurred.…

Author: Anton Chuvakin, Office of the CISO I’ve been banging the drum about SIEM migration for a long time. If you’ve followed my work since the Gartner days (or even the "Security Warrior" era), you…

Many years ago while at Gartner, I wrote a blog post where I defined the concept of the “Patch Sound Barrier.” (original via Archive if you…

OK, RSA 2026 is over. If my record keeping is correct, I first attended RSA in 2006. At that time, I was annoyed by … AI? XDR? NIDS? ……

AI SOC vendor claims don't match what practitioners see in production. A report documents the gap between marketing and incident performance.

It’s not easy to stop employees from using shadow agents, but these 4 tips on robust AI governance can make the shadows less appealing.

Look, I’m not a developer, and the last time I truly “wrote code” was probably a good number of years ago (and it was probably Perl so you…

Create and Share Your Security Gemini Gems We're launching a new Community challenge, and this time you not only have a chance to win Google swag, but to also be featured on the Google Cloud Security…

This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our next Cloud…

This blog is perhaps a little bit more like an ad, so if you don’t want to check the ads, consider not reading it.

Co-Author: Anton ChuvakinSimilar to our 2024 AI blog recap, as we reflected on the customer conversations we had in 2025 and the blogs we’ve written, 3 key themes emerged. The common thread woven…

Co-Author: Anton ChuvakinSimilar to our 2024 AI blog recap, as we reflected on the customer conversations we had in 2025 and the blogs we’ve written, 3 key themes emerged. The common thread woven…

(written jointly with Tim Peacock)

Amazingly, Medium has fixed the stats so my blog / podcast quarterly is back to life. As before, this covers both Anton on Security and my…

(written jointly with Tim Peacock)

Amazingly, Medium has fixed the stats so my blog / podcast quarterly is back to life. As before, this covers both Anton on Security and my…

The Cloud Security Podcast from Google is a weekly news and interview show with insights from the cloud security community.

Here are the three core pillars that define how we protect production workloads at Google-scale.

In the ever-evolving world of cybersecurity, we’ve learned to live with a constant churn of buzzwords. Remember the good old days of "Big Data," "Next-Gen" everything, and the brief, bright explosion…

Here’s how Google’s Incident Management and Digital Forensics team gathers and analyzes digital evidence.

The Cloud Security Podcast from Google is a weekly news and interview show with insights from the cloud security community.

Here are the three core pillars that define how we protect production workloads at Google-scale.

In the ever-evolving world of cybersecurity, we’ve learned to live with a constant churn of buzzwords. Remember the good old days of "Big Data," "Next-Gen" everything, and the brief, bright explosion…

So this may suck, but I am hoping to at least earn some points for honesty here. I wanted to write something pithy and smart once I…

At Google, we consider our fundamental network security perimeters to be state-of-the-art, in part because they rely on defense in depth. Here’s our approach.

Think of quality assurance (QA) for products. Security assurance plays a similar, yet distinct, role for systems and applications and, yes, now also for AI. It's all about building high confidence…