Anton Chuvakin

How Google Does It: Threat modeling, from basics to AI | Google Cloud Blog Threat modeling plays a critical role at Google in how we detect and respond to threats — and secure our use of the public cloud.

"How Google Does It: Threat modeling, from basics to AI" cloud.google.com/transform/ho... <- another HGD blog, very fun, and yes, with some details omitted :-)

Simple to Ask: Is Your SOC AI Ready? Not Simple to Answer! In early 1900s, factory owners bolted the new electric dynamo onto their old, central-shaft-and-pulley systems. They thought they were…

"Simple to Ask: Is Your #SOC #AI Ready? Not Simple to Answer!" medium.com/anton-on-sec... <- How to tell if your SOC is ready for AI? A simple 5 point framework :-)

How Google Does It: Building AI agents for cybersecurity and defense | Google Cloud Blog At Google, we’ve moved from talking about AI agents to actively using them for security. Here are four critical lessons that helped shape our approach.

"How Google Does It: Building #AI agents for cybersecurity and defense" cloud.google.com/transform/ho... <- another fun blog in our series on how Google does security; this time ... AI AGENTS! Enjoy!

10 Tips for Governing AI Agents | Community Co-Author: Marina KaganovichThe rapid evolution from generative artificial intelligence, commonly known as genAI, to agentic AI is a stark reminder to organizations to prioritize “going back to…

"10+ Tips for Governing #AI Agents" security.googlecloudcommunity.com/community-bl... <- this is a bit dense (so perhaps not fun?) but kinda useful and stems from MANY painful conversations on this topic....

How Google Does It: Building AI agents for cybersecurity and defense | Google Cloud Blog At Google, we’ve moved from talking about AI agents to actively using them for security. Here are four critical lessons that helped shape our approach.

"How Google Does It: Building #AI agents for cybersecurity and defense" cloud.google.com/transform/ho... <- another fun blog in our series on how Google does security; this time ... AI AGENTS! Enjoy!

Simple to Ask: Is Your SOC AI Ready? Not Simple to Answer! In early 1900s, factory owners bolted the new electric dynamo onto their old, central-shaft-and-pulley systems. They thought they were…

"Simple to Ask: Is Your #SOC #AI Ready? Not Simple to Answer!" medium.com/anton-on-sec... <- How to tell if your SOC is ready for AI? A simple 5 point framework :-)

It's actually really fucked to sell a pet feeder that doesn't even have the schedule stored on the device.

Oh so they nuke Virginia and thousands of animals around the world just starve? That was your plan here?

SIEM, Startups, and the Myth (Reality?) of IT Inertia: A Reformed Analyst Reflects on SIEM MQ 2025 It’s not every day you get to reflect on a journey that started as an odd “googley” startup and culminates in a shiny Leaders placement on…

"#SIEM, Startups, and the Myth (Reality?) of IT Inertia: A Reformed Analyst Reflects on SIEM MQ 2025" medium.com/anton-on-sec... <- kinda what it says in the title; warning: this is a tepid take, NOT a hot take :-)

SIEM, Startups, and the Myth (Reality?) of IT Inertia: A Reformed Analyst Reflects on SIEM MQ 2025 It’s not every day you get to reflect on a journey that started as an odd “googley” startup and culminates in a shiny Leaders placement on…

"#SIEM, Startups, and the Myth (Reality?) of IT Inertia: A Reformed Analyst Reflects on SIEM MQ 2025" medium.com/anton-on-sec... <- kinda what it says in the title; warning: this is a tepid take, NOT a hot take :-)

AI Adoption: Learning from the Cloud's Early Days | Community In the early days of cloud computing around the mid-2010s, many organizations began informally experimenting with the cloud. Cloud was new and exciting, cloud was free (at times and in small doses),…

"#AI Adoption: Learning from the Cloud's Early Days" security.googlecloudcommunity.com/community-bl... <- this is NOT new, but I end up seeing more and more lessons for current AI adoption wave in the previous cloud adoption wave. It definitely rhymes!

AI Adoption: Learning from the Cloud's Early Days | Community In the early days of cloud computing around the mid-2010s, many organizations began informally experimenting with the cloud. Cloud was new and exciting, cloud was free (at times and in small doses),…

"#AI Adoption: Learning from the Cloud's Early Days" security.googlecloudcommunity.com/community-bl... <- this is NOT new, but I end up seeing more and more lessons for current AI adoption wave in the previous cloud adoption wave. It definitely rhymes!

3 new ways to use AI as your security sidekick | Google Cloud Blog Generative AI is already providing clear and impactful security results. Here’s three decisive examples that organizations can adopt right now.

"3 new ways to use #AI as your security sidekick" cloud.google.com/transform/3-... <- this is NOT new, but this use cases do help today even though they are so old (meh ... April 2025); bonus: nothing to buy to do this!

Decoupled SIEM: Where I Think We Are Now? In the world of security operations, there is a growing fascination with the concept of a “decoupled SIEM,” where detection, reporting…

"Decoupled SIEM: Where I Think We Are Now?" medium.com/anton-on-sec... <- well, you wanted this, and here is ... NOT this, but more of an incomplete thought / rambling on decoupled #SIEM

3 new ways to use AI as your security sidekick | Google Cloud Blog Generative AI is already providing clear and impactful security results. Here’s three decisive examples that organizations can adopt right now.

"3 new ways to use #AI as your security sidekick" cloud.google.com/transform/3-... <- this is NOT new, but this use cases do help today even though they are so old (meh ... April 2025); bonus: nothing to buy to do this!

Anton’s Security Blog Quarterly Q3 2025 Amazingly, Medium has fixed the stats so my blog / podcast quarterly is back to life. As before, this covers both Anton on Security and my…

"Anton’s Security Blog Quarterly Q3 2025" medium.com/anton-on-sec... <- my usual semi regular list of my top blogs and podcasts, enjoy!

The Gravity of Process: Why New Tech Never Fixes Broken Process and Can AI Change It? Let’s tackle the age old question: can new technology fix broken or missing processes?

"The Gravity of Process: Why New Tech Never Fixes Broken Process and Can AI Change It?" medium.com/@anton.chuva... <- long simmering debate on tech changing broken/missing process and #AI role in it...

AI will consume all of IT by 2030—but not all IT jobs, Gartner says AI still threatens entry-level IT jobs.

The IT industry has already prepared for thousands of AI-driven job losses and will likely see more, though we could reach a point where AI will be something that everyone in IT will have to become familiar with in one way or another.

"#SOC Visibility Triad is Now A Quad — SOC Visibility Quad 2025" medium.com/anton-on-sec...

"#SOC Visibility Triad is Now A Quad — SOC Visibility Quad 2025" medium.com/anton-on-sec...

Google Cloud Security Threat Horizons Report #12 Is Out! This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our next Threat…

"Google Cloud Security Threat Horizons Report #12 Is Out!" medium.com/@anton.chuva... <- lots of fun cloud intrusions, some old ... some really old :-)

Google Cloud Security Threat Horizons Report #12 Is Out! This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our next Threat…

"Google Cloud Security Threat Horizons Report #12 Is Out!" medium.com/@anton.chuva... <- lots of fun cloud intrusions, some old ... some really old :-)

Sorry. Will fix tomorrow

The Modern Security and Governance Stack Isn’t Ready for AI Agents Agents aren’t users, non-human identities, APIs, or service accounts that our current tooling covers

"The Modern Security and Governance Stack Isn’t Ready for #AI Agents" securetrajectories.substack.com/p/the-modern... <- a very fun read, a perfect balance of sad and useful :-)

“Maverick” — Scorched Earth SIEM Migration FTW! In my days there, Gartner had Maverick research (here is mine, from 2015 about social engineering AIs…. yes, really!) that “deliberately…

'“Maverick” — Scorched Earth #SIEM Migration FTW!' medium.com/@anton.chuva... <- it is weird, it is fun, it is about ... SIEM!

“Maverick” — Scorched Earth SIEM Migration FTW! In my days there, Gartner had Maverick research (here is mine, from 2015 about social engineering AIs…. yes, really!) that “deliberately…

'“Maverick” — Scorched Earth #SIEM Migration FTW!' medium.com/@anton.chuva... <- it is weird, it is fun, it is about ... SIEM!

The Modern Security and Governance Stack Isn’t Ready for AI Agents Agents aren’t users, non-human identities, APIs, or service accounts that our current tooling covers

"The Modern Security and Governance Stack Isn’t Ready for #AI Agents" securetrajectories.substack.com/p/the-modern... <- a very fun read, a perfect balance of sad and useful :-)

Anton’s Security Blog Quarterly Q2 2025 Amazingly, Medium has fixed the stats so my blog/podcast quarterly is back to life. As before, this covers both Anton on Security and my…

"Anton’s Security Blog Quarterly Q2 2025" medium.com/anton-on-sec... <- my sort-of quarterly-ish top list of my blogs and podcast episodes. Here is Q2 2025!

Definitely plan to!

Anton’s Security Blog Quarterly Q2 2025 Amazingly, Medium has fixed the stats so my blog/podcast quarterly is back to life. As before, this covers both Anton on Security and my…

"Anton’s Security Blog Quarterly Q2 2025" medium.com/anton-on-sec... <- my sort-of quarterly-ish top list of my blogs and podcast episodes. Here is Q2 2025!

The Hard Truths of SOC Modernization Modernizing a Security Operations Center (SOC) is a complex challenge for many organizations, often leading to delays, difficulties and considerable frustration, in achieving a truly effective…

"The Hard Truths of #SOC Modernization" www.googlecloudcommunity.com/gc/Community... <- perhaps not novel for everybody but a useful reminder for many (from our Office of the CISO team)