Google Unveils AI-Powered Security Upgrades and Threat Intelligence at RSAC 2025

At the RSA Conference (RSAC) 2025, Google unveiled significant advancements in its AI-driven security portfolio, emphasizing automation, real-time threat intelligence, and unified management to address evolving cyber threats. The announcements highlight Google's commitment to empowering security teams with cutting-edge tools.

Key Announcements

1. Mandiant M-Trends 2025 Report

Google released the 16th annual Mandiant M-Trends report, drawing insights from 450,000+ hours of incident investigations. Key findings include:

• 33% of threats involve exploits
• 16% stem from credential theft
• 14% are phishing attacks

The report also highlights emerging risks, such as North Korean IT worker insider threats and blockchain-based cyber threats, with the financial sector remaining a prime target.

2. Enhanced Google Unified Security Platform

Building on its recent AI-driven security advancements, Google introduced:

• Gemini AI upgrades: Real-time threat intelligence, automated malware analysis, and improved attack surface visibility.
• Composite Detections: Links unrelated security events to uncover multistage attacks while reducing false positives/negatives.
• Content Hub: Centralized resource for integrations, dashboards, and prebuilt queries to streamline security operations.

3. Agentic SOCs: Autonomous AI for Security

Google revealed its vision for agentic Security Operations Centers (SOCs), powered by AI agents that independently:

• Investigate alerts (Alert Triage Agent)
• Reverse-engineer malware (Malware Analysis Agent)

These agents will enter preview in Q2 2025 for select customers.

4.