What’s worrying about this report is that it’s coming from Google itself.
Google just bought Mandiant, one of the leading cybersecurity and threat intelligence firms. Therefore, Google is one of the leading cybersecurity and threat intelligence firms.
My point being that they deem this serious enough to release publicly themselves instead of an internal memory, and that this is about an active threat actor rather than a mere vulnerability.
cloud.google.com
Hot