
DigiCert has extended its partnership with Google Cloud to provide independent cryptographic attestation for confidential computing workloads. Using PKI-based signatures and certificates, DigiCert acts as a neutral third-party root of trust, verifying that workloads running in memory on confidential VMs are genuinely encrypted — removing reliance on cloud providers to self-certify security. The move addresses growing demand driven by AI model training with proprietary data and digital sovereignty requirements. An IDC survey found 75% of organizations are adopting confidential computing, with data integrity, regulatory compliance, and workload security as top drivers. DigiCert plans to extend similar attestation partnerships to other cloud providers.
Nguồn: https://securityboulevard.com/2026/06/digicert-to-validate-confidential-computing-security-on-google-cloud. 8sync News chỉ tóm tắt và dẫn link; bản quyền nội dung thuộc tác giả và nguồn gốc.
Google giới thiệu tầm nhìn tương lai về cơ sở dữ liệu với sự tích hợp AI agent và truy vấn không chính xác (inexact queries) thông qua ngôn ngữ tự nhiên, thay vì chỉ SQL truyền thống. Họ đang nhúng các chức năng AI (như AI.IF sử dụng Gemini) trực tiếp vào Google SQL trên các nền tảng Spanner, AlloyDB và BigQuery, đồng thời phát triển "proxy models" để giảm chi phí và độ trễ khi gọi LLM. Trong 3-5 năm tới, người dùng có thể chuyển từ tương tác trực tiếp sang điều phối các agent, thay thế dashboard truyền thống bằng phân tích hội thoại.
Những công nghệ mới từ Google như proxy models và AI tích hợp trực tiếp vào cơ sở dữ liệu sẽ giúp tối ưu hóa hiệu suất và chi phí khi xử lý các truy vấn phức tạp, đồng thời mở ra khả năng tương tác tự nhiên thông qua ngôn ngữ, giúp lập trình viên tìm hiểu cách ứng dụng AI vào hệ thống dữ liệu hiện đại.
Google Cloud announces new VPC Service Controls capabilities designed specifically for agentic AI workloads. Key updates include: agent identity support in directional ingress/egress rules using IAM principals and principalSets for fleet-wide policy management; granular MCP attribute-based access control (mcp.toolName, mcp.method, mcp.tool.isReadOnly); and native integration with the Gemini Enterprise Agent Platform that automatically blocks public internet access. The post outlines a layered security model combining identity controls (IAM, Principal Access Boundaries), network controls (VPC-SC, firewalls), and resource controls (Organization Policy). It maps VPC-SC defenses to OWASP Top 10 for LLM Applications threat vectors including indirect prompt injection, tool misuse, and insider threats, positioning VPC-SC as a critical destination-based safety net that blocks data exfiltration even when an agent holds valid IAM credentials.
Canonical's Anbox Cloud now supports Google Cloud's C4A metal instances, which are Axion-based Arm bare-metal servers. This combination eliminates the long-standing trade-off between native Android performance and cloud scalability. Developers can run large-scale Cuttlefish environments directly on Arm hardware without nested virtualization, enabling system-level Android development, CI/CD pipelines, and validation workflows that previously required physical device labs. Anbox Cloud also spans C4A and N4A instances, letting teams mix bare-metal and virtual infrastructure within a single deployment.
Google Cloud has announced the general availability of cross-region backups for its Backup and DR Service. Unlike multi-region backups, this feature lets organizations store backups in a completely different region from the primary workload, offering a cost-effective middle ground between same-region and multi-region strategies. It supports Compute Engine instances, Disks, and Filestore, with Cloud SQL and AlloyDB support coming later. Setup involves creating a backup vault in a secondary region, configuring a backup plan pointing to that vault, and attaching it to the resource. Key benefits include cost optimization, simplified compliance with data residency laws like GDPR, and improved resilience against regional outages.
Google Cloud announces several Confidential Computing updates aimed at securing AI workloads. Key highlights include: Confidential G4 VMs with NVIDIA RTX PRO 6000 Blackwell GPUs now in preview across all supported regions; open-source Prompt Encryption SDKs on GitHub for end-to-end encrypted AI inference; a collaboration with Apple to run Private Cloud Compute on Google Cloud using Intel TDX and NVIDIA Blackwell GPUs; Intel TDX support coming to C4 machine series; Live Migration for C3D Confidential VMs now generally available; and Confidential Space updates including Intel Trust Authority integration for independent attestation and NVIDIA H100 GPU support for secure multi-party AI workloads.
Google Cloud has rebranded Log Analytics as Observability Analytics, adding general availability for trace data querying and a new Observability API. The platform lets developers and SREs run SQL queries that JOIN logs and distributed trace spans in a single place, powered by BigQuery under the hood. Key use cases include analyzing AI agent tool failure rates and P95 latency across millions of spans, correlating trace data with application logs to identify which customers experience the worst performance, and joining observability data with business metrics in BigQuery. The Observability API enables programmatic management of observability buckets and allows AI agents or analytical workloads to query telemetry directly via BigQuery APIs. Concrete SQL query examples are provided for both AI agent optimization and customer latency analysis scenarios.