Google SecOps deprecates three IOC feeds
securitygcpdeprecationengineer
deprecation
Google SecOps is deprecating three legacy Mandiant IOC feeds: MANDIANT_ACTIVE_BREACH_IOC, MANDIANT_FUSION_IOC, and OPEN_SOURCE_INTEL_IOC. These feeds will be removed entirely after March 18, 2027, encouraging users to migrate to the GTI_IOC feed. This change affects users relying on the soon-to-be-removed IOC feeds for threat intelligence.
Deprecations (1) ›
- Google SecOps
The MANDIANT_ACTIVE_BREACH_IOC , MANDIANT_FUSION_IOC , and OPEN_SOURCE_INTEL_IOC feeds are deprecated in favor of the GTI_IOC feed. After March 18, 2027, we will be removing the MANDIANT_ACTIVE_BREACH_IOC , MANDIANT_FUSION_IOC , and OPEN_SOURCE_INTEL_IOC feeds. For more information on how to migrate, see Migrate Mandiant legacy feeds to GTI .
Read the original announcement →
https://docs.cloud.google.com/release-notes#August_05_2026
Related releases
- Access Transparency for Firebase App Hosting enters Preview Google Cloud release notes ·
- Error Reporting Adds Rust Stack Trace Support on GCP Google Cloud release notes ·
- Firebase App Hosting Access Approval enters Preview Google Cloud release notes ·
- Apigee X Maintenance Updates Begin for Instances with Preferred Windows Google Cloud release notes ·
- Cloud Workstations adds Compute Engine VM suspend and resume in Preview Google Cloud release notes ·
- Google Cloud IAM Workflow Updated for Workforce Identity Pool Providers Google Cloud release notes ·