Google launches Gemini-powered Cybersecurity AI Tools To Combat Cyber Threats

Google is tapping advanced Artificial Intelligence (AI) to strengthen cybersecurity in the fight against cyber scams. The tech giant says it has drastically cut the time and effort involved in reverse-engineering malware attacks by using Gemini 1.5 Pro large language model. In one such case, it took only 34 seconds for the Gemini-powered cybersecurity AI tools and AI model to deconstruct the code of the WannaCry malware and find a weakness that could be utilized to neutralize it. WannaCry is a very dangerous form of ransomware that wreaks havoc on thousands of organizations across the globe. Let’s read ahead how is Artificial Intelligence transforming every industry and Gemini is empowering businesses to fight cybersecurity threats. 

“Our vision for AI is to accelerate your ability to protect and defend against threats by shifting from manual, time-intensive efforts to assisted and, ultimately, semi-autonomous security — while providing you with curated tools and services to secure your AI data, models, applications, and infrastructure”, said Google in its blog.

Can Google Gemini really combat cyber security threats?

With reverse engineering malware attacks, Gemini can also summarize threat reports into natural language that enables enterprises to easily decode and analyze how these attacks might impact their business. Google says Threat Intelligence has a huge amount of network information that could be used to see the bigger picture in the cybersecurity world and help security experts understand what they need to prioritize. Turns out, Google is also using Gemini to crawl the web to retrieve and categorize reports of online threats, offering ways to counter them.

In its latest release, Google has announced the general availability of Gemini across Google Threat Intelligence and Google Security Operations, among others to enhance defenders’ capabilities through generative AI.

Gemini in Security Operations has added a new assisted investigation capability that walks a user through the platform, dynamically adapting to the context of the investigation, helping to uncover recent threats by tapping into critical insights from Google Threat Intelligence and MITRE, analyze security events, craft detections using natural language, and provide recommendations on next steps.

The other release, Google Threat Intelligence, is a resource that helps to accelerate the identification and remediation of emerging threats. It streamlines threat response by tapping into insights gleaned from Mandiant frontline experts, the VirusTotal intel community, and Google’s vast threat data culled from protecting billions of devices and user accounts.

With Gemini integrated into Threat Intelligence, analysts can now rapidly search Mandiant’s vast frontline research to gain visibility into threat actor behaviors in seconds and get AI-generated summaries of relevant open-source intelligence articles auto-ingested by the platform to lessen investigation time. From Google, these protections extend to over 4 Billion devices and 1.5 Billion email accounts globally, efficiently blocking 100 Million phishing attempts daily. The security professionals of Mandiant are part of this effort. They analyze attacker tactics and techniques in exquisite detail and bring to the table hundreds of detailed investigations annually. This deep well of experience is key to empowering customers with what they need to fend off today’s sophisticated cyber threats. You may also read about Cybersecurity: Protecting Against Emerging Threats in 2024 to get a clear picture. 

Also, with Code Insight in Gemini within Threat Intelligence, inspecting more than 200 file types to summarize their unique attributes and identify potentially malicious code is allowed. Gemini simplifies the way security professionals are able to understand the most pressing threats to their organizations and act on them quickly. 

Does Google Gemini have a Microsoft competitor?

The answer is yes! The Google announcement came right after Microsoft introduced Copilot for Security, using GPT-4 technology to entrust cybersecurity professionals with new query capabilities, tailored specifically for threat analysis.

Security Copilot has the power of Microsoft’s global threat intelligence, and it runs on the strong backbone of Azure to give enterprise-grade security solutions that are in line with the strongest privacy standards. Copilot leverages AI and ML both and ensures the ability to detect and respond to threats in real time.

The system can analyze an enormous amount of data from various sources, allowing organizations to identify security threats and vulnerabilities in advance to take action against them before they start to cause serious damage. That advanced analytic capability ensures that businesses remain one step ahead of cybercriminals in safeguarding their critical assets and sensitive information.

In addition, Security Copilot seamlessly integrates into existing security tools and platforms, amplifying their capabilities and giving a unified security stance. The solution has an intuitive interface and powerful reporting capabilities that make it easy to comprehend and act on insights, hence reducing the time to mitigate risks. This means organizations can improve their overall security resilience and thus attain continuous protection within the highly complex and hostile cyber environment.

With such innovations, Google and Microsoft are constantly striving to bring about a new era for cybersecurity. They are using AI-powered technologies to arm, fortify defenses, and protect digital ecosystems from ever-evolving threats.