Helpnetsecurity Google Cloud Enhances CodeMender with New Security Controls
Article Content
- •Google Cloud's CodeMender receives new security controls for vulnerability management.
- •Businesses can isolate attack simulations and conduct targeted scans for better control.
- •Enhanced security measures extend across Google Cloud platforms, improving overall security posture.
Google Cloud has introduced new security controls for CodeMender, its AI tool designed to identify and fix software vulnerabilities. The updates allow businesses to isolate attack simulations and conduct targeted code scans, enhancing control over scanning speed and costs. These controls include the ability to verify vulnerabilities within an operating system-level sandbox or an isolated virtual machine, and they incorporate human oversight for local writes and command execution. Additionally, Google Cloud is extending security and governance measures across its platforms, including the Gemini platform and Google Kubernetes Engine. The enhancements aim to bolster security for businesses utilizing AI agents in cloud environments, with features like centralized credential management and identity-based controls for data movement. CodeMender remains in preview, with early evaluations indicating a potential reduction in vulnerability discovery time by over 95%.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track AWS in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What new features does CodeMender include?
How does this affect businesses using Google Cloud?
Is CodeMender fully operational?
Continue Reading
Volt Typhoon's Silent Train Network Targets US Critical Infrastructure The Chinese state-sponsored hacking group Volt Typhoon has been linked to a covert network called Silent Train, which has exploited at least four zero-day vulnerabilities over three years. This network utilizes rapidly rotating chains of compromised SOHO routers, IoT devices, and enterprise infrastructure to access…
GitLab Issues Emergency Patch for Critical RCE Vulnerability GitLab has released emergency patches for a critical remote code execution vulnerability, CVE-2026-97229, affecting its Community and Enterprise Editions. This flaw, stemming from an integer overflow in the CI/CD regular expression compiler, allows unauthenticated attackers to execute arbitrary code via specially…