Google has unveiled its Emerging Threats Center, an AI-powered platform designed to dramatically accelerate how organizations detect and respond to new cybersecurity threats. Traditionally, when a new vulnerability surfaces, security teams can spend days or even weeks determining exposure and developing detection rules.
Google’s new system aims to shrink that timeline to near real time by automating much of the process through Google Threat Intelligence, Gemini AI, and automated detection engineering.
The platform, now available to licensed Google Security Operations customers, continuously analyzes threat data to identify gaps in an organization’s detection coverage.
Google adds Emerging Threats Center to speed detection and response https://t.co/dw5BIlhjcp
— The Cyber Security Hub™ (@TheCyberSecHub) November 12, 2025
When it finds a potential blind spot, it automatically creates and tests new detection rules for analysts to review and deploy. “The Emerging Threats Center helps customers take a threat-centric view to protect themselves against real-world activity,” said Chris Corde, Senior Director of Product Management at Google Cloud.
You May Like To Read: Dhaka Gripped by Wave of Crude Bomb, and Arson Attacks
Unlike traditional, reactive workflows that rely on manual rule-writing, the system connects frontline intelligence directly to an organization’s telemetry, scanning up to 12 months of historical data to determine if they’ve been targeted by active campaigns. It also validates whether current defenses are effective against newly discovered exploits.
A Google-commissioned study found that 59% of security leaders struggle to convert threat intelligence into actionable defense strategies.
The new center addresses this by filtering large volumes of global threat data, prioritizing only the most relevant risks, and displaying them in a unified, campaign-based dashboard.
Powered by Gemini models, the platform synthesizes simulated event data to test detection capabilities before threats strike, closing the gap between intelligence gathering and defense. Analysts can now shift from reactive alert handling to proactive campaign defense, turning what once took days into hours.
This marks a major step toward AI-driven cybersecurity operations, where machine learning agents continuously adapt defenses in sync with the world’s evolving threat landscape, helping organizations move from reaction to anticipation.
Check out our latest video:
