GCP releases
Google Cloud releases and Terraform Google provider. New features, breaking changes, security advisories and deprecations - each summarised in plain English and updated continuously.
Tracking 329 GCP releases · Updated
- Google Cloud release notes securitygovernanceawsgcpgaengineer ·
Cloud SQL backup vaults support CMEK for immutable storage
Cloud SQL instances encrypted with customer-managed encryption keys (CMEK) now have backup vault support, enabling immutable and indelible storage with enforced retention. This GA feature enhances data protection and compliance for sensitive workloads. It applies to users managing Cloud SQL instances with CMEK.
feature - Google Cloud release notes securitygcppreviewengineer ·
Security Command Center External Exposure now in Preview
Security Command Center External Exposure is now available in Preview for the Premium tier. This feature helps manage and reduce external attack surfaces by automating asset discovery, validating network exposure paths, and performing exploitability testing. It is targeted at users of Security Command Center Premium who need to secure their cloud environments.
feature - Google Cloud release notes securitygcpengineer ·
Google SecOps SIEM: Auto-collapse query editor
Google SecOps SIEM now supports an auto-collapse setting for the query editor, allowing it to automatically minimize after a search is executed. This change enhances screen real estate for viewing search results, benefiting analysts and engineers who frequently run queries. The feature is available by default, with the query editor remaining expanded unless configured otherwise.
patch - Google Cloud release notes securitygcppreviewengineer ·
Google SecOps Marketplace Integrations Updated
The Google SecOps Marketplace has released version 1.0 of a new Secret Manager integration. Additionally, source code for numerous existing integrations is now publicly available on GitHub, and several connectors have received updates including bug fixes for idle issues and enhanced hostname extraction. These changes primarily benefit security operations teams and engineers managing security tool integrations.
feature patch - Google Cloud release notes securitygcpengineer ·
Google SecOps: Query editor auto-collapse setting
Google SecOps now offers an auto-collapse setting for its query editor, allowing users to maximize screen space after running searches. This feature enhances usability for viewing search results. The query editor defaults to remaining expanded, and users can configure this behavior via settings.
patch - Google Cloud release notes securitygcpengineer ·
Google SecOps Monthly Documentation Changelog Launched
Google SecOps has launched a new monthly changelog to document major updates to its security operations documentation. This initiative aims to improve transparency and keep users informed about changes to resources and guides. Users can find the updated changelog for detailed information.
announcement - Google Cloud release notes securitygcpengineer ·
Google SecOps SOAR Monthly Changelog Documentation
Google SecOps is introducing a new monthly changelog to document significant updates to its Security Orchestration, Automation, and Response (SOAR) platform documentation. This change aims to improve transparency and keep users informed about new information and changes. Users can find detailed updates in the dedicated documentation changelog.
announcement - Google Cloud release notes aisecuritygcpengineer ·
Google SecOps SIEM integrates Gemini Cloud Assist for feed management
Google SecOps SIEM now embeds Gemini Cloud Assist directly into its Feed Management interface, simplifying feed creation and troubleshooting. This feature aims to assist users by answering configuration questions and guiding them through setup processes. It is now available to all users within the Feed Management section, with Gemini providing recommendations that require manual application by the user.
feature - Google Cloud release notes securitygcppreviewengineer ·
GCP IAM: Preview of Error IDs for Permission Troubleshooting
Google Cloud IAM is introducing error IDs in permission error messages to aid in troubleshooting access issues. These IDs provide contextual details like principal, resource, and permission, helping engineers pinpoint problems faster. This feature is currently in Preview, offering a more efficient debugging experience for those working with GCP IAM.
feature - Google Cloud release notes securitygcppreviewengineer ·
Google Cloud Secure Web Proxy Adds Authorization Policies and mTLS
Google Cloud's Secure Web Proxy now supports authorization policies for identity- and content-based access control on outbound traffic, allowing granular delegation to services like Service Extensions. Additionally, frontend mutual TLS (mTLS) integration enables validated client identities for stricter outbound traffic controls. Both features are currently available in Preview, enhancing workload security.
feature - Google Cloud release notes securitygcpsecurity-advisoryengineer ·
Container Optimized OS updates kernel, drivers, and security fixes
Container Optimized OS has released several updates across multiple versions, including kernel upgrades, GPU driver support, and various package updates. These changes address numerous security vulnerabilities, such as CVEs in the Linux kernel and in packages like pyjwt and urllib3. Users of Container Optimized OS should review these updates to ensure their systems are patched against known security risks.
security patch - Google Cloud release notes securitygcpengineer ·
Google SecOps SOAR Release 6.3.89
Google SecOps SOAR has released version 6.3.89, now rolling out to initial regions. This update focuses on internal and customer-reported bug fixes. Customers using Google SecOps SOAR should note the phased regional rollout of this patch.
announcement - Google Cloud release notes securitygcpengineer ·
Google SecOps SOAR 6.3.88 Release
Google SecOps SOAR version 6.3.88 has been released and is available globally. This update introduces no specific new features or major changes but ensures the platform is up-to-date. The release is available for all regions.
announcement - Google Cloud release notes securitygcpengineer ·
Google SecOps SIEM adds Non-prioritized IoC Matching rules
Google SecOps SIEM has introduced a new detection category for Non-prioritized IoC Matching rules within its Curated Detections feature. This enhancement integrates with Google's IoC feeds and threat intelligence to identify threats like cryptomining and C2 communications that might otherwise be missed. This update primarily benefits security operations teams and SecOps engineers using Google SecOps.
feature - Google Cloud release notes securitygcpengineer ·
Google SecOps Adds Non-Prioritized IoC Matching Rules
Google SecOps has introduced a new detection category called Non-prioritized IoC Matching rules within its Curated Detections feature. This enhancement integrates with Google's IoC feeds to identify malicious activities using high-fidelity indicators like IPs and domains. It aims to cover threats often missed by standard rules, such as cryptomining and C2 communications, enhancing security posture for SecOps environments.
feature - Google Cloud release notes securityinfragcpengineer ·
Cloud Service Mesh Releases Security Updates
Managed Cloud Service Mesh has released new sidecar versions for its rapid, regular, and stable channels, addressing a security vulnerability CVE-2026-035. These updates are rolling out progressively. The security proxy for Gateway API on GKE is also being updated across all managed release channels.
security - Google Cloud release notes datasecuritygcpengineer ·
Sensitive Data Protection adds batch inspection
Sensitive Data Protection now supports inspecting and de-identifying batched content within a single request. This enhancement allows for more efficient processing of larger datasets. The feature is available for general use, impacting engineers and architects working with sensitive data.
feature - Google Cloud release notes securitygcpengineer ·
Google SecOps adds SIEM case search and async APIs
Google SecOps now integrates SIEM Search with case and case history analysis, enabling security teams to correlate security telemetry and case details in one interface. It also introduces asynchronous Search APIs for large datasets, allowing non-blocking, long-running queries. These updates streamline incident response and improve application responsiveness for security analysts and developers working with large security datasets.
feature announcement - Google Cloud release notes securitygcpengineer ·
Google SecOps SIEM adds asynchronous search APIs
Google SecOps SIEM now supports asynchronous search APIs for large datasets, enabling long-running queries without blocking applications. This feature allows for non-blocking searches with operation IDs, handling up to 1 million results from various data sources like UDM events and ECG, and provides paginated results for efficient retrieval. This is ideal for users performing extensive data analysis within their security operations.
announcement - Google Cloud release notes securitygcpengineer ·
Google SecOps Marketplace: Attach Playbook to Alert Action Updated
Google SecOps Marketplace has refactored the code for the 'Attach Playbook to Alert' action in Siemplify, version 109.0. This update aims to improve internal code structure without introducing new user-facing functionality. The change affects users who utilize this specific action within their security playbooks.
patch