Mandiant (part of Google Cloud)

🔒 Ransomware attackers are dismantling backups ahead of time, so you have no choice but to pay. Join our M-Trends 2026 webinar on July 22 to understand the threat and get a technical blueprint for true business continuity. Secure your spot! 👇 goo.gle/4bGLyrg

Security leaders must prove financial value. 📊 Discover how Mandiant Cybersecurity Consulting acts as a true business enabler in a recent @IDC study: goo.gle/4bxsQlP Join us on July 29 to unpack the data: goo.gle/4ePqSj0

🚨 MAJOR DISRUPTION: Google disrupted the NetNut residential proxy network, which enrolled ~2M home devices into its botnet. We observed 316 distinct threat clusters—cybercrime and espionage groups—using the network to mask activity and launch password spray attacks. 📋 goo.gle/44GKDmL

⏰ The Mandiant Academy Practical Threat Hunting course will commence this month! Register now to test your threat hunting skills in various scenarios, including social engineering, network and system compromise, and nation-state APT attacks. 🔗: goo.gle/4vymieJ

See you in Vegas? 🎰 Join Google Security at Black Hat 2026. Find us on the show floor at Booth #2152 to chat with our experts and experience hands-on demos. Register today: goo.gle/4vDnduI

🗣️ REMINDER: Register now for The Mandiant Academy Practical Threat Hunting course. Exercise and improve your threat-hunting skills through a range of practical labs and scenarios. ✍️: goo.gle/4uPwX3z

🚨 NEW THREAT INTEL: Zero-day exploitation (CVE-2026-20245) of Cisco Catalyst SD-WAN Manager. A threat actor gained root access via malicious CSV upload, and used anti-forensic techniques for evasion. Get the details, IOCs and remediation guidance. 🔗 goo.gle/4uYDYiC

📣 24 hours to go! Join Mandiant experts Doug Foss and Pascal Issa to learn how to accelerate response and strengthen cyber defense operations. ✍️ Register: goo.gle/4uNZc2N

We're sharing lessons from red teaming AI apps: 1️⃣ Defend your pipeline end-to-end 2️⃣ Verify all front-end data 3️⃣ Lock down system prompts 4️⃣ Stick to AppSec basics 5️⃣ Build an early warning system Learn more 👉 goo.gle/4aVMY0H

PRC-nexus actor UNC6508 targeted North American research, exploiting REDCap servers to deploy INFINITERED malware. The actor remained undetected for over a year and abused enterprise admin tools for covert data exfil. Analysis, guidance and IOCs ➔ cloud.google.com/blog/topics/th…

🚨 ShinyHunters is exploiting an Oracle PeopleSoft vulnerability (CVE-2026-35273) as part of an extortion campaign targeting higher education. Read the full analysis, and get IOCs and remediation guidance to stay ahead of the threat: goo.gle/4e52jOz

⏪ ICYMI: Mandiant identified exploitation of a critical vulnerability in KnowledgeDeliver, a learning management system commonly used in Japan. The vulnerability allows for unauthenticated remote code execution via ViewState deserialization. Details: goo.gle/444QSjW

Join part two of the M-Trends 2026 virtual series on SecOps transformation. Learn to evolve cyber defense functions, operationalize threat intelligence at scale, and proactively hunt. ✍️ Register: goo.gle/4v2olYn

The AI era has rewritten the rules of cyber risk. Today at Security Talks 2026, we're exploring Google AI Threat Defense, dark web intelligence, and AI agents for SecOps. Join us at 11:00AM PDT (Americas): goo.gle/4xiKeUR

Join our Security Talks virtual event on June 10 🎉 We’re exploring Google AI Threat Defense, dark web intelligence, and Google SecOps AI agents. Learn to anticipate threats and move from reactive to proactive, machine-speed defense. RSVP: goo.gle/4oie1ZR

📚 Our cutting-edge Practical Threat Hunting course is built by consultants and delivered by experts with decades of professional expertise. Join us in-person in Dublin: goo.gle/4ak6L9P

AI-driven attacks demand autonomous response. Join Google Cloud Security Talks to see how Google AI Threat Defense helps you outpace AI-driven attacks, and how Google SecOps AI agents help strengthen your SOC. Register: goo.gle/3Qpzi7a

🚨 UNC3753 is targeting US law firms using vishing and RMM tools for data extortion. In instances linked to UNC3753, individuals posing as IT technicians attempted direct data theft using physical, in-person access. Read more & get IOCs ➔ goo.gle/49HfT8g

Read the latest AI Threat Tracker report here: goo.gle/4v4wrzT

🔓 Threat actors are using AI to bypass defenses. Join Google Threat Intelligence Group analysts for a deep-dive into the AI-powered kill chain and the speed of modern attacks. 🔗: goo.gle/4o0v8ip