GCP Weekly Intelligence #13

The week in one paragraph

Three hundred and twenty-two notes across Monday to Friday, five security bulletins, and for once the bulletins are the story rather than the footnote. Two of the five describe the same event from different angles: the private keys of eight subordinate certificate authorities were compromised, which makes this a trust-store problem rather than a Google Cloud problem, and the remediation is a list of package versions in your own dependency file. A third describes a Linux kernel flaw that is a container escape, affecting GKE Standard and Autopilot alike. The only Critical of the week is narrower than it reads and touches one VMware product that is explicitly not the Google Cloud one. Underneath all that, the volume was ordinary: Container-Optimized OS accounted for 131 of the 322 notes on its usual run of kernel and CVE rebuilds, and Looker for another 37.

A CA lost its private keys, and the fix is not in Google's SDK

Two bulletins, GCP-2026-075 on Monday and GCP-2026-077 on Tuesday, cover one underlying event. The first gives the timeline and the scope: on Saturday, October 17, 2026, Google received a report from a security researcher regarding the compromise of private keys associated with eight eMudhra subordinate Certification Authority (CA) certificates, including those cross-signed by AAA Certificate Services. Consequently these CA certificates are no longer trusted and are being revoked.

Two sentences in that bulletin are there to stop a particular misreading, and they are worth quoting exactly because they will be the first thing anyone asks: Google Cloud infrastructure has not been breached. And security telemetry shows no evidence of exploitation against Google Cloud workloads. Nothing of Google's was broken into. What happened is that certificates your code may still trust can now be forged by somebody else.

The consequence is spelled out on the Apigee side in GCP-2026-077: outbound TLS connections trusting affected roots-specifically emSign ECC Root CA - G3 -are vulnerable to Man-in-the-Middle (MITM) interception, because an attacker possessing compromised intermediate keys can issue fraudulent TLS certificates for arbitrary domain names. For Apigee specifically, outbound HTTPS connections made from Apigee runtimes (such as TargetEndpoints, TargetServers, ServiceCallouts, and outbound JWKS policy lookups) using default or unmanaged system trust stores may accept forged certificates. Note which direction that is. This is not about certificates you serve; it is about certificates you accept when your own code calls out.

The exposure test is a single question: does your TLS trust store still accept the affected roots? The bulletin puts it as applications built with the Google Cloud SDK Libraries are affected if their TLS trust store still accepts emSign ECC Root CA - G3 , emSign Root TLS CA - G3 , or AAA Certificate Services.

Why patching the operating system is not enough

This is the part worth understanding properly, because it determines whether your remediation actually works. Google's own libraries are mostly not where the trust store lives: the Google Cloud SDK Libraries themselves don't bundle CA certificates, with one exception: Java's com.google.api-client: google-api-client before 2.9.2. Otherwise the trust store comes from a transport dependency (including the Google-maintained gRPC packages), the language runtime, or the operating system — so the fix is an update to those rather than to the Google Cloud SDK Libraries.

Which means the instinctive response, rebuild the base image and move on, fixes only one of three possible sources. For Python the bulletin names all three, and the third is the one that defeats an OS-level fix:

• certifi earlier than 2026.10.19 (REST transports)
• httplib2 earlier than 0.32.1, used by google-api-python-client and google-auth-httplib2 — and its bundled trust store is used when certifi is not installed
• grpcio earlier than 1.84.1 (gRPC transports); bundled root store, does not read the operating system trust store

Read that last one twice. A gRPC client carries its own root store and ignores the operating system's, so a fully patched host with an old grpcio wheel is still exposed, and every signal you would normally trust — the base image is current, the OS packages are current — says you are fine. The remediations are correspondingly specific: upgrade certifi to 2026.10.19 or later, upgrade httplib2 to 0.32.1 or later, upgrade grpcio to 1.84.1 or later. For the other ecosystems there is a shortcut, since in Java, Ruby, and PHP, upgrading the Google client libraries also pulls the fix in.

And the step that is easy to skip when the fix is a version bump in a lock file: then rebuild and redeploy your container images. A patched requirements file in the repository protects nothing that is still running.

A kernel flaw that is a container escape

GCP-2026-078, published Wednesday, is rated Medium and reads considerably worse than that. A vulnerability (CVE-2026-98432) was discovered in the Linux kernel IPv4 TCP stack, and the flaw can cause a kernel panic or a container escape (root code execution on the node).

There are two ways in, and the first has no precondition worth the name: an unprivileged process in a container can trigger it locally, without special capabilities such as CAP_NET_RAW. No elevated capability, no privileged pod, nothing a Pod Security admission policy would normally catch. If you run other people's code, or your own code that processes other people's input, that is your threat model.

The second way in is remote: a network attacker can also trigger it by sending TCP packets with IPv4 options to a listener on the node or on the cluster control plane. Here there is a precondition, and it is the familiar one — the network attack requires access to a TCP listener on your nodes, Pods, or the control plane's IP-based endpoint. Which produces the sentence that decides whether this is urgent or merely important for you: clusters that restrict this access to trusted sources, for example with firewall rules and control plane authorized networks, are not exposed to network attacks.

Note what that does and does not buy. Authorized networks and firewall rules close the remote path. They do nothing about the local path, and the local path needs no capabilities. So the control that usually counts as sufficient here only halves the problem, and GKE Standard clusters and GKE Autopilot clusters are impacted — Autopilot's managed node layer is not an exemption, it is the reason you wait for the patched versions rather than patching nodes yourself.

The week's only Critical is narrower than it looks

GCP-2026-079 on Thursday is the single Critical, and the scope line matters more than the rating. Per advisory VMSA-2026-0008, Broadcom has identified an out-of-bounds write remote code execution vulnerability in the SDDC Manager Node.js Brotli decoder. But: this impacts only VMware solution on Google Cloud running VMware Cloud Foundation 9.1.x and does not impact Google Cloud VMware Engine. Two similarly named products, one affected. Remediation is not Google's to ship — apply the Broadcom-recommended workarounds outlined in the VMSA-2026-0008 advisory. CVE-2026-111497.

The fifth bulletin, GCP-2026-076 on Monday, is brief: a security vulnerability was discovered in Istio, tracked as CVE-2026-111943 and rated Medium, with details in the Cloud Service Mesh bulletin. If you run Cloud Service Mesh it is a version bump; if you do not, it is nothing.

Networking, data and governance

The non-security week had one item that matters to anyone who has been putting IPv6 off. On Cloud Load Balancing, frontend configuration for load balancing incoming IPv6 traffic is now generally available (GA) for a set of load balancers including the regional external Application Load Balancer. Read against this series' current run through hybrid networking, that is the second IPv6 signal in two days: #85 noted that HA VPN supports dual stack and IPv6-only while Classic VPN supports neither. The dual-stack path is steadily becoming the default-supported one, and the products that do not support it are the older generation in each pair.

One governance change is worth diarising even though it is phrased gently. In Security Command Center, Data Security Posture Management (DSPM) is no longer available to new organizations. Existing organizations with it enabled retain access; new ones cannot turn it on. If DSPM is in a reference architecture or a landing-zone blueprint you hand to new organizations, that blueprint now has a hole in it, and the failure will surface as a feature that simply cannot be enabled rather than as an error anyone has explained.

For VPC Service Controls there is a quiet addition: general availability support for the following integration: Service Management. Each of those integrations is one more API that can be brought inside a perimeter, and the list is the real measure of whether a perimeter is worth building for a given estate.

On the data side the notable one is a pricing-tier change rather than a feature: you can now use BigQuery Graph and run Graph Query Language (GQL) queries when you use on-demand pricing. Graph queries were previously the kind of thing you needed a reservation to try, and on-demand availability is what turns an evaluation into an afternoon rather than a procurement exercise.

Four more items sit in the diary rather than the backlog, all of them dated or already in force: the BigQuery Data Transfer Service Shopify connector drops several fields from 31 January 2027; Gemini Notebook Enterprise is changing its web address, so saved links will need revisiting; Apigee Edge Microgateway 3.3.12 removed support for Node.js 20 and now supports only 22, 24 and 26; and Google SecOps deprecated the ListCaseEvents API endpoint effective 2 November 2026, which is to say already.

Everything else was volume. Container-Optimized OS shipped 131 notes across its LTS refresh releases, almost all of them kernel and package CVE fixes rolled into new milestones; the rolled-up section of the inventory below lists every distinct CVE identifier rather than collapsing the count. Looker contributed 37, and the agent platforms — Agent Registry reaching GA for standalone skills, with security scanning and governance alongside it — contributed most of the rest.

What I would act on

Four things, in the order I would do them.

One: inventory your transport dependencies, not your base images. The CA compromise is remediated in certifi, httplib2 and grpcio at specific versions, and the gRPC case ignores the operating system trust store entirely. So the question to ask of every deployed service is not "is the image current" but "which of these three is in the lock file, and at what version". Then rebuild and redeploy, because a corrected lock file protects nothing still in flight. If you run Java, check google-api-client against 2.9.2 — it is the one Google library that does bundle certificates.

Two: check whether your clusters restrict access to node and control-plane listeners. That single control is what separates "exposed to a remote container escape" from "exposed only to a local one". Authorized networks and firewall rules on the control plane endpoint are the named mitigations, and they are worth confirming rather than assuming — they tend to be set once, early, by somebody who has since left the team.

Three: accept that the local path needs a patched version, not a policy. An unprivileged process with no special capabilities is enough, which means admission policy does not help and neither does dropping capabilities. Track the patched GKE versions and take them on both Standard and Autopilot.

Four: if DSPM appears anywhere in a landing-zone design, note that new organizations can no longer enable it. Better to discover that while reading a release note than while provisioning a new organization against a blueprint that assumes it.

Complete inventory — all 322 notes

Built from the combined release-notes feed, the security bulletins feed, the GKE bulletins feed and the Cloud Blog feed by build_weekly_inventory_gcp.py, for the news window Monday 2 to Friday 6 November 2026. Every raw note lands in exactly one bucket and the buckets are asserted to sum to the raw total; every link was fetched and every day anchor confirmed present.

How this inventory reconciles

Google Cloud published 322 notes across 49 products and 5 days in this window, read from 4 feeds. Every one of them is accounted for below, in exactly one place:

Repeating runs, rolled up

• Container Optimized OS (75 notes) — Security75 notes, across 4 releases (cos-121-18867-652-29, cos-125-19216-801-14, cos-129-19506-625-14, cos-133-19999-44-193). They fix 24 distinct CVEs. A CVE is patched once per release, so the note count is higher than the CVE count — these are separate notes, not duplicates, and are counted as such: CVE-2024-25621, CVE-2024-41110, CVE-2025-15558, CVE-2025-31133, CVE-2025-52565, CVE-2025-52881, CVE-2026-102266, CVE-2026-111497, CVE-2026-116587, CVE-2026-18924, CVE-2026-24051, CVE-2026-29181, CVE-2026-32285, CVE-2026-33186, CVE-2026-34986, CVE-2026-35469, CVE-2026-39883, CVE-2026-45022, CVE-2026-46595, CVE-2026-63209, CVE-2026-76957, CVE-2026-84304, CVE-2026-84445, CVE-2026-86145.
• Container Optimized OS (43 notes) — Fixed43 notes, across 4 releases (cos-121-18867-652-29, cos-125-19216-801-14, cos-129-19506-625-14, cos-133-19999-44-193). 26 distinct texts, each repeated once per release and counted individually:
  • Added support for NVIDIA driver v580.196.07.
  • Added support for NVIDIA driver v595.112.07.
  • Fixed a 60 second outage after an idpf function reset on IPU E2100 caused by misreading PFGEN_RSTAT.
  • Updated cos-gpu-installer to v2.7.12. It installs ucodes firmwares for r615 and newer GPU driver versions.
  • Upgraded app-admin/google-guest-configs to v20261027.00.
  • Upgraded app-admin/oslogin to v20261021.00.
  • Upgraded app-admin/sosreport to v4.12.1.
  • Upgraded app-arch/bzip2 to v1.0.8-r5.
  • Upgraded app-arch/gzip to v1.15.
  • Upgraded app-containers/docker-credential-helpers to v0.9.12.
  • Upgraded app-editors/vim to v9.2.1229, Upgraded app-editors/vim-core to v9.2.1229.
  • Upgraded app-editors/vim to v9.2.1229.
  • Upgraded app-editors/vim-core to v9.2.1229.
  • Upgraded app-misc/ca-certificates to v20260816.3.131.1.
  • Upgraded app-misc/jq to v1.8.2.
  • Upgraded dev-db/sqlite to v3.54.1.
  • Upgraded dev-libs/nss to v3.132.
  • Upgraded net-fs/cifs-utils to v7.8.
  • Upgraded net-libs/gnutls to v3.8.13.
  • Upgraded net-misc/rsync to v3.5.1.
  • Upgraded sys-apps/less to v710.
  • Upgraded sys-fs/mdadm to v4.6-r1.
  • Upgraded sys-libs/libcap-ng to v0.9.6.
  • Upgraded sys-libs/libxcrypt to v4.4.38-r1.
  • Upgraded sys-libs/talloc to v2.5.0.
  • Upgraded sys-libs/timezone-data to v2026f.

One change, published under several products

• FeatureSupport for the Python 3.15 runtime is in Preview .Published under 3 products: App Engine flexible environment Python, App Engine standard environment Python, Cloud Run functions.
• FeatureThe following changes were added in 1.35.700-gke.124: Updated system components and container base images to remove the distrusted eMudhra (emSign) and AAA Cert…Published under 2 products: Google Distributed Cloud (software only) for VMware, Google Distributed Cloud (software only) for bare metal.

Everything else, by product

API Gateway — 2

• FeatureCall Google Cloud APIs from streaming gateways Streaming gateways can now call Google Cloud APIs such as aiplatform.googleapis.com . A gateway with an effective…Tue 03 Nov
• AnnouncementNegative backend deadlines are no longer deprecated The deprecation of negative backend deadline values announced on October 23, 2026 is withdrawn. In an OpenAP…Wed 04 Nov

Agent Platform Workbench — 8

• Change20261101.00_p0 ReleaseMon 02 Nov · 20261101.00_p0
• ChangeInstalled latest packages from upstream dependencies.Mon 02 Nov · 20261101.00_p0
• Change20261101.00_p0 ReleaseMon 02 Nov · 20261101.00_p0
• ChangeInstalled latest packages from upstream dependencies.Mon 02 Nov · 20261101.00_p0
• SecurityUpgraded the container host to the latest Container-Optimized OS LTS release, rebasing onto the newest operating system, Go, and containerd security fixes.Mon 02 Nov · 20261101.00_p0
• SecurityUpdated the CA certificate configuration.Mon 02 Nov · 20261101.00_p0
• SecurityUpgraded the container host to the latest Container-Optimized OS LTS release, rebasing onto the newest operating system, Go, and containerd security fixes.Mon 02 Nov · 20261101.00_p0
• SecurityUpdated the CA certificate configuration.Mon 02 Nov · 20261101.00_p0

Agent Registry — 2

• FeatureSkill security scanning and governance in Agent Registry are available. You can automatically scan standalone skill revisions for security issues, review Findin…Fri 06 Nov
• FeatureStandalone skills in Agent Registry are generally available (GA) . You can register, version, search, and govern standalone Skill resources, immutable SkillRevi…Fri 06 Nov

AlloyDB for PostgreSQL — 5

• FeatureYou can now tune SQL queries using AI. Available starting with version 1.6.2 of the google_ml_integration extension, the ai.tune_sql function uses an LLM along…Mon 02 Nov
• ChangeAlloyDB for PostgreSQL now defaults to PostgreSQL major version 18 for new clusters.Tue 03 Nov
• FeatureDirect Iceberg access in AlloyDB for PostgreSQL is available for PostgreSQL 18 and later ( in Preview ). This feature lets you query Apache Iceberg tables in Cl…Wed 04 Nov
• FeatureSyncing data from BigQuery into AlloyDB is generally available ( GA ). This feature lets you copy or mirror analytical tables from BigQuery into AlloyDB for low…Wed 04 Nov
• FeatureAlloyDB Express is available in Preview for PostgreSQL 18. Optimized for rapid prototyping and for workflows that use AI coding agents, this configuration provi…Wed 04 Nov

Apigee Edge for Public Cloud — 5

• AnnouncementReleased Edge Microgateway 3.3.12. Edge Microgateway 3.3.12 includes the following component versions: Component Version microgateway 3.3.12 plugins 3.3.9 edgea…Wed 04 Nov
• BreakingRemoved support for Node.js 20 from Edge Microgateway. Use Node.js 22, 24, or 26 instead. Edge Microgateway 3.3.12 supports only Node.js 22, 24, and 26. Support…Wed 04 Nov
• BreakingRemoved the npm and npx command-line tools from the Edge Microgateway Docker image. Install custom plugin dependencies before you add the plugins to the contain…Wed 04 Nov
• SecurityFixed multiple security vulnerabilities in Edge Microgateway. Upgrade to Edge Microgateway 3.3.12. Edge Microgateway 3.3.12 fixes the following vulnerabilities:…Wed 04 Nov
• AnnouncementScheduled maintenance of Management/Control Plane for the Apigee Edge for Public Cloud on November 6, 2026. Scheduled maintenance of Management/Control Plane fo…Thu 05 Nov

Apigee Operator for kubernetes — 3

• AnnouncementOn November 4, 2026, we released an updated version of Apigee.Wed 04 Nov
• FeatureThe Apigee Operator for Kubernetes version 1.1.2 is now available.Wed 04 Nov
• SecurityBug ID Description 521387476, 521388685, 521389473, 521389648, 521390401, 521390431, 521418315, 521467563, 521470029, 521523106, 521532318, 522502328, 522502515…Wed 04 Nov

Apigee X — 5

• AnnouncementOn November 2, 2026, we released an updated version of Apigee. Note: Rollouts of this release began today and may take four or more business days to be complete…Mon 02 Nov
• FeatureEKM health monitoring You can now monitor EKM health and configure alerts for EKM-related issues using Cloud Logging. For more information, see EKM health monit…Mon 02 Nov
• AnnouncementOn November 3, 2026, we released an updated version of Apigee (1-18-0-apigee-8). Note: Rollouts of this release began today and can take four or more business d…Tue 03 Nov
• FixedBug ID Description 574037227 Added config override token oauth_default_access_token_expiry_time_in_millis (per-org via the deployment contract) that overrides t…Tue 03 Nov
• SecurityBug ID Description N/A Security fix for Apigee infrastructure.Tue 03 Nov

Apigee hybrid — 6

• Announcementv1.15.10 On November 3, 2026 we released an updated version of the Apigee hybrid software, v1.15.10. For information about upgrading, see Upgrading Apigee hybri…Tue 03 Nov · v1.15.10
• FixedFixed in this release Bug ID Description 578314600 Fixed an issue where apigee-connect-agent ignored HTTPS_PROXY and failed to establish a tether in clusters th…Tue 03 Nov · v1.15.10
• SecurityBug ID Description N/A Security fixes for apigee-asm-ingress . This addresses the following vulnerabilities: CVE-2026-116585 CVE-2026-116586 CVE-2026-63209 N/A…Tue 03 Nov · v1.15.10
• Announcementv1.14.10 On November 5, 2026 we released an updated version of the Apigee hybrid software, v1.14.10. For information about upgrading, see Upgrading Apigee hybri…Thu 05 Nov · v1.14.10
• FixedFixed in this release Bug ID Description 578314600 Fixed an issue where apigee-connect-agent ignored HTTPS_PROXY and failed to establish a tether in clusters th…Thu 05 Nov · v1.14.10
• SecurityBug ID Description N/A Security fixes for apigee-asm-ingress . This addresses the following vulnerabilities: CVE-2026-116585 CVE-2026-116586 CVE-2026-56857 CVE-…Thu 05 Nov · v1.14.10

Application Design Center — 1

• FeatureApplication Design Center is available in the following regions: Osaka, Japan ( asia-northeast2 ) Mumbai, India ( asia-south1 ) Bangkok, Thailand ( asia-southea…Tue 03 Nov

Assured Open Source Software — 1

• FeatureThe Assured Open Source Software Premium tier supports Google Cloud regions and multi-regions for remote (or proxy) Artifact Registry repositories. For the list…Fri 06 Nov

BigQuery — 16

• FeatureLakehouse caching for cross-cloud data access is generally available (GA). Cross-cloud caching is disabled by default. You can opt in to caching on a Lakehouse…Mon 02 Nov
• FeatureLakehouse supports the following remote catalog providers for cross-cloud data access. This feature is generally available (GA). Databricks Unity Catalog on Ama…Mon 02 Nov
• FeatureYou can now monitor the performance, adoption, latency, and costs of your data agents and their conversations by using Google Cloud Observability in BigQuery. T…Mon 02 Nov
• FeatureYou can use the AI.PARSE_DOCUMENT function to extract layout elements such as titles, headings, paragraphs, lists, tables, and images by using the Document AI l…Mon 02 Nov
• FeatureYou can now use BigQuery change history and continuous queries for Apache Iceberg managed tables in Lakehouse. You can use the APPENDS table-valued function (TV…Mon 02 Nov
• FeatureThe SECURE_CONTEXT function is now available in Preview . SECURE_CONTEXT returns the value of a request-scoped secure context parameter provided at query runtim…Mon 02 Nov
• FeatureThe Data Engineering Agent now supports BigQuery AI, ML, and object functions and statements in generated Dataform SQLX pipelines and agent instruction files .…Mon 02 Nov
• ChangeIn BigQuery Studio , the left pane has been updated with new tab names. The Classic Explorer tab has been renamed to the Data tab, and the Repository tab has be…Tue 03 Nov
• FeatureYou can now use persistent and temporary SQL user-defined functions (UDFs) in BigQuery continuous queries to encapsulate and reuse custom real-time transformati…Tue 03 Nov
• ChangeThe BigQuery Metadata curation console page has been removed. You can now use Knowledge Catalog to schedule Cloud Storage discovery scans , manage data profilin…Thu 05 Nov
• FeatureIn the query execution graph's query text heatmap , you can now view and navigate through a hierarchical list of context references, such as nested function cal…Thu 05 Nov
• FeatureIn the query execution graph, the query text heatmap now supports displaying the SQL text for persistent and temporary user-defined functions (UDFs). This featu…Thu 05 Nov
• FeatureConversational analytics in BigQuery is now available in the asia-northeast1 (Tokyo) location. For more information, see Locations .Thu 05 Nov
• AnnouncementYou can now use BigQuery Graph and run Graph Query Language (GQL) queries when you use on-demand pricing.Fri 06 Nov
• BreakingStarting January 31, 2027, the BigQuery Data Transfer Service for Shopify connector will no longer support the following fields: The legacyMode field from the D…Fri 06 Nov
• FeatureYou can now use a custom organization policy to allow or deny specific operations on models in BigQuery. This feature is in preview .Fri 06 Nov

Bigtable — 3

• FeatureBigtable offers conversational analytics, which lets you query your operational data using natural language. This feature uses the Conversational Analytics API…Wed 04 Nov
• FeatureThe QueryData tool lets you query the data in your database using conversational language and build data agents. This feature is available in Preview . For more…Wed 04 Nov
• FeatureYou can configure a Bigtable automated backup policy on SSD instances to create daily hot backups and specify how long the backups remain hot before automatical…Fri 06 Nov

Blog — 20

• PostHow Nammu21 automates syndicated loans on Google Cloud Universal LedgerTue 03 Nov
• PostLeading in the agentic era: How to put people first as you adopt AI agentsTue 03 Nov
• PostFive rules for evaluating agent skills before they bloat your context windowTue 03 Nov
• PostHelping you build and defend at machine-speed in the agentic eraWed 04 Nov
• PostHighlights and reflections from Google Public Sector Summit: Where mission meets moonshotWed 04 Nov
• PostIntroducing Compute Engine API multi-versioning: Predictable evolution without breaking productionWed 04 Nov
• PostNew capabilities to power agents at scale with Google's Agentic Data CloudWed 04 Nov
• PostUnify operational and Lakehouse data with direct Iceberg access in AlloyDB for PostgreSQLWed 04 Nov
• PostAlloyDB Express: Instant, scale-to-zero PostgreSQL for developers and coding agentsWed 04 Nov
• PostChrome Enterprise Premium drives 50%+ projected cost reduction for MercariWed 04 Nov
• PostBringing conversational analytics to Gemini with Agentic Data Cloud connectorsThu 05 Nov
• PostSemantic aggregation over millions of rows in BigQuery with AI.AGGThu 05 Nov
• PostGemini Omni 1.2 Flash: Fast, cost-effective, and reliable video generation and editing now generally availableThu 05 Nov
• PostBuilding an agent skill optimizer with AlphaEvolve, Harbor and Gemini 4 ArgonThu 05 Nov
• PostWhat’s new with Google Data CloudThu 05 Nov
• PostPowering open infrastructure for autonomous agentsThu 05 Nov
• PostWhat’s new with Google CloudFri 06 Nov
• PostIntroducing Z4M: storage-optimized compute for AI/ML and parallel file systemsFri 06 Nov
• PostThe Blueprint: Orchestrating 5,000+ AI assets for a World Cup TV spotFri 06 Nov
• PostZero-shot predictions in Pandas using the new BigQuery AccessorFri 06 Nov

Cloud Asset Inventory — 1

• FeatureThe following resource type is publicly available through the ExportAssets , ListAssets , BatchGetAssetsHistory , QueryAssets , Feed , SearchAllResources , and…Mon 02 Nov

Cloud Load Balancing — 3

• FeatureDistributed tracing with Cloud Trace is available in Preview for Global external Application Load Balancers, Regional external Application Load Balancers, Regio…Mon 02 Nov
• FeatureFor mutual TLS (mTLS) on Application Load Balancers, frontend mTLS validation relaxations are generally available . The ALLOW_VALIDATION_RELAXATIONS client vali…Mon 02 Nov
• FeatureFrontend configuration for load balancing incoming IPv6 traffic is now generally available (GA) for the following load balancers: Regional external Application…Fri 06 Nov

Cloud NGFW — 1

• FeatureAdvanced malware sandbox (WildFire) integrates dynamic machine learning (ML) and cloud-based behavioral sandboxing to perform deep inspection of network-routed…Mon 02 Nov

Cloud SQL for PostgreSQL — 1

• ChangeThe rollout of the following Cloud SQL for PostgreSQL minor version and extension upgrades is complete: Minor versions 14.23 is upgraded to 14.24. 15.18 is upgr…Tue 03 Nov

Cloud SQL for SQL Server — 2

• ChangeCloud SQL for SQL Server supports additional metrics within the system insights dashboard ( GA ) related to engine memory, performance, and replication. For a d…Wed 04 Nov
• FeatureCloud SQL for SQL Server now supports read pool autoscaling ( GA ), which helps you more easily manage your application's workload needs. This feature automates…Wed 04 Nov

Cloud Service Mesh — 7

• Announcement1.31.3-asm.3 is now available for in-cluster Cloud Service Mesh. For details on upgrading Cloud Service Mesh, see Upgrade Cloud Service Mesh . Cloud Service Mes…Mon 02 Nov
• Announcement1.30.7-asm.3 is now available for in-cluster Cloud Service Mesh. For details on upgrading Cloud Service Mesh, see Upgrade Cloud Service Mesh . Cloud Service Mes…Mon 02 Nov
• Announcement1.29.10-asm.0 is now available for in-cluster Cloud Service Mesh. For details on upgrading Cloud Service Mesh, see Upgrade Cloud Service Mesh . Cloud Service Me…Mon 02 Nov
• FeatureConfiguring authorization policies ( GCPAuthzPolicy ) on Cloud Service Mesh sidecars on Google Kubernetes Engine (GKE) is now available ( Preview ). This featur…Mon 02 Nov
• FixedPatch 1.31.3-asm.3 contains the fix for the following platform CVEs: CVE Proxy Control Plane Distroless CNI Severity CVE-2026-111497 Yes Yes No Yes High (9.8) C…Mon 02 Nov
• FixedPatch 1.30.7-asm.3 contains the fix for the following platform CVEs: CVE Proxy Control Plane Distroless CNI Severity CVE-2026-111497 Yes Yes No Yes High (9.8) C…Mon 02 Nov
• FixedPatch 1.29.10-asm.0 contains the fix for the following platform CVEs: CVE Proxy Control Plane Distroless CNI Severity CVE-2026-111497 Yes Yes No Yes High (9.8)…Mon 02 Nov

Cloud Storage — 1

• FeatureYou can pause hard deletions for a bucket when you need more time to restore soft-deleted objects before they're permanently deleted. For more information, see…Wed 04 Nov

Cloud Trace — 1

• FeatureYou can reprovision an existing _Trace bucket to satisfy regulatory requirements for data residency and encryption. After reprovisioning, the storage location a…Fri 06 Nov

Cluster Toolkit — 1

• FeatureCluster Toolkit v1.108.0 is available. This release lets you pin node pools to reservation sub-blocks in the gke-node-pool module , adds Slurm support for Cloud…Tue 03 Nov

Compute Engine — 1

• FeatureGenerally available : You can now create C4 sole-tenant nodes on Intel Granite Rapids with the following node types: c4-node-288-576 c4-node-288-1080 c4-node-28…Mon 02 Nov

Config Controller — 1

• ChangeConfig Controller now uses the following versions of its included products: Config Connector v1.159.0, release notesFri 06 Nov

Container Optimized OS — 13

• Changecos-133-19999-44-193 Kernel Docker Containerd GPU Drivers COS-6.18.55 v29.4.3 v2.4.1 See ListThu 05 Nov · cos-133-19999-44-193
• ChangeUpgraded sys-apps/casfs to v0.1.24.Thu 05 Nov · cos-133-19999-44-193
• Changecos-121-18867-652-29 Kernel Docker Containerd GPU Drivers COS-6.6.159 v27.5.1 v2.0.10 See ListThu 05 Nov · cos-121-18867-652-29
• FeatureEnabled PCI peer to peer direct memory access for 64k kernels.Thu 05 Nov · cos-133-19999-44-193
• AnnouncementThis is an LTS Refresh release.Fri 06 Nov · cos-125-19216-801-14
• AnnouncementThis is an LTS Refresh release.Fri 06 Nov · cos-129-19506-625-14
• Changecos-125-19216-801-14 Kernel Docker Containerd GPU Drivers COS-6.12.114 v27.5.1 v2.2.7 See ListFri 06 Nov · cos-125-19216-801-14
• Changecos-129-19506-625-14 Kernel Docker Containerd GPU Drivers COS-6.12.114 v27.5.1 v2.2.7 See ListFri 06 Nov · cos-129-19506-625-14
• ChangeUpgraded sys-apps/casfs to v0.1.24.Fri 06 Nov · cos-129-19506-625-14
• FeatureAdded RTC support in A4X-Max images.Fri 06 Nov · cos-125-19216-801-14
• FeatureEnabled PCI peer to peer direct memory access for 64k kernels.Fri 06 Nov · cos-125-19216-801-14
• FeatureAdded RTC support in A4X-Max images.Fri 06 Nov · cos-129-19506-625-14
• FeatureEnabled PCI peer to peer direct memory access for 64k kernels.Fri 06 Nov · cos-129-19506-625-14

Data Studio — 1

• FeatureYou can now combine tables vertically in Data Studio blends by using the Union merge operator, which appends rows across up to five tables and removes duplicate…Thu 05 Nov

Datastream — 2

• FeatureDatastream is now available in the africa-south1 (Johannesburg) region. For the list of all available regions, see IP allowlists and regions .Mon 02 Nov
• FeatureDatastream is now available in the asia-southeast3 (Bangkok) region. For the list of all available regions, see IP allowlists and regions .Mon 02 Nov

GKE security bulletin — 1

• GCP-2026-078Published: 2026-11-04 Reference: CVE-2026-98432 Description Severity A vulnerability (CVE-2026-98432) was discovered in the Linux kernel IPv4 TCP stack. The fla…Wed 04 Nov

Gemini Enterprise — 8

• FeatureGemini Enterprise: Salesforce federated data store Connecting a Salesforce data source with Gemini Enterprise using data federation is generally available (GA).…Tue 03 Nov
• FeatureGemini Enterprise: Switch between teams in the mobile app You can switch between multiple teams in the Gemini Enterprise mobile app without logging out and resc…Wed 04 Nov
• FeatureGemini Enterprise: Prepaid credits for Pay-as-you-go subscriptions and usage above quota Prepaid credits are generally available (GA) for self-serve (online) Cl…Thu 05 Nov
• AnnouncementGemini Enterprise: End of Gemini Code Assist entitlement for existing subscriptions Bundled Gemini Code Assist entitlements for existing Gemini Enterprise Stand…Fri 06 Nov
• BreakingGemini Notebook Enterprise: Updated web addresses The URL path for the Gemini Notebook Enterprise web app is changing in two ways. In both cases, existing links…Fri 06 Nov
• FeatureGemini Enterprise: Video generation upgrades to Omni 1.2 Flash Gemini Omni 1.2 Flash is generally available (GA) and replaces Veo 3.1 for video generation in th…Fri 06 Nov
• FeatureGemini Enterprise: Adobe data store (Preview) The Adobe data store is available in Public Preview in Gemini Enterprise. You can use natural language to search,…Fri 06 Nov
• FeatureGemini Enterprise: Model availability respects resource location policies If the resource locations organization policy for your project doesn't allow the globa…Fri 06 Nov

Gemini Enterprise Agent Platform — 7

• FeatureServing tuned Gemini 3.x models on global endpoints Serving tuned Gemini 3.x models on global endpoints is available in General Availability (GA) . You can copy…Mon 02 Nov
• FeatureProvisioned Throughput support for supervised fine-tuned models (GA) Provisioned Throughput support for supervised fine-tuned models is generally available . Bu…Wed 04 Nov
• FeatureAlphaGenome gRPC and unified HTTP serving support AlphaGenome ( alphagenome-004 ) now supports unified HTTP/2 gRPC streaming and chunked binary protobuf HTTP st…Wed 04 Nov
• FeatureGemini Omni 1.2 Flash Gemini Omni 1.2 Flash ( gemini-omni-1.2-flash ) is available in General Availability (GA) . Gemini Omni 1.2 Flash is an omni-modal foundat…Thu 05 Nov
• FeatureInteractions API long decodes for Gemini 4 Argon Long decodes up to 1,048,576 tokens (minus input tokens) on the Interactions API ( v1beta1 ) are available in G…Thu 05 Nov
• FixedCodeMender updates (v0.18.0) This release introduces updates to CodeMender: Verification tool-turn guardrails : Added exploratory tool-turn limits to cm verify…Thu 05 Nov
• FeatureDedicated Memory Bank functionality in the Google Cloud console You can create, configure, and inspect Agent Platform Memory Bank instances from the dedicated M…Fri 06 Nov

Google Cloud Contact Center as a Service — 5

• AnnouncementGoogle Cloud CCaaS 6.29 We've released version 6.29 of Google Cloud CCaaS. The timing of the update to your instance depends on the deployment schedule that you…Mon 02 Nov
• FeatureEmail session hiding (Apps API) You can now hide email sessions from the agent adapter using two new Apps API endpoints. Hiding a session removes it from agent…Mon 02 Nov
• FixedThis release addresses the following issues: Fixed an issue where cross-language agent-to-queue voice transfers played whisper audio and displayed Selected Lang…Mon 02 Nov
• AnnouncementGoogle Cloud CCaaS 6.32 We've released version 6.32 of Google Cloud CCaaS. The timing of the update to your instance depends on the deployment schedule that you…Fri 06 Nov
• FixedThis release addresses the following issues: Fixed an issue where abandoned queue records incorrectly calculated wait times from the call's initial queue entry…Fri 06 Nov

Google Distributed Cloud (software only) for VMware — 2

• AnnouncementGoogle Distributed Cloud (software only) for VMware 1.35.700-gke.124 is now available for download. To upgrade, see Upgrade clusters . Google Distributed Cloud…Wed 04 Nov
• FixedThe following issues were fixed in 1.35.700-gke.124: Fixed vulnerabilities listed in Vulnerability fixes . Fixed an issue where audit-proxy retried audit log ex…Wed 04 Nov

Google Distributed Cloud (software only) for bare metal — 2

• AnnouncementGoogle Distributed Cloud (software only) for bare metal 1.35.700-gke.124 is now available for download. To upgrade, see Upgrade clusters . Google Distributed Cl…Wed 04 Nov
• FixedThe following issues were fixed in 1.35.700-gke.124: Fixed vulnerabilities listed in Vulnerability fixes . Fixed an issue where removing a node from a cluster l…Wed 04 Nov

Google Kubernetes Engine — 1

• FeatureIn GKE version 1.37.0-gke.3570000 and later, you can split each Local SSD on a node between ephemeral storage and raw block storage. When you create a cluster o…Tue 03 Nov

Google SecOps — 3

• DeprecatedDeprecation of the ListCaseEvents API endpoint Effective November 2, 2026, the ListCaseEvents API endpoint is deprecated. You should use the ListCaseEvidenceDat…Mon 02 Nov
• AnnouncementConsolidated Settings and Navigation The Consolidated Settings and Navigation feature is now in public preview. It replaces the separate SIEM Settings and SOAR…Wed 04 Nov
• Feature[Spotlight Feature] Case activity tagging You can now use custom tags for individual activities, comments, tasks, and actions on the Case Wall, and filter the w…Thu 05 Nov

Infrastructure Manager — 1

• FeatureInfrastructure Manager now supports Terraform version 1.16.5. Terraform version 1.16.5 is distributed under the Business Source License (BUSL) and is offered as…Mon 02 Nov

Knowledge Catalog — 2

• FeatureKnowledge Studio in Knowledge Catalog is available in Preview . Knowledge Studio lets you explore data assets and semantic relationships using natural language…Mon 02 Nov
• FeatureGovernance workflows in Knowledge Catalog support batch metadata change requests. You can group up to 250 create, update, and delete operations for entries and…Tue 03 Nov

Looker — 37

• AnnouncementLooker 26.24 will roll out to Looker (original) instances on the following schedule: Expected deployment start: Sunday, November 8, 2026 Expected final deployme…Fri 06 Nov
• FeatureThe filters as tiles feature is now generally available.Fri 06 Nov
• FixedAn issue has been fixed where custom tooltips in KPI visualizations didn't apply the visualization's Value Format and Comparison Value Format settings. This fea…Fri 06 Nov
• FixedAn issue has been fixed where custom tooltips in KPI visualizations didn't respect the configured left, center, or right alignment setting. This feature now per…Fri 06 Nov
• FixedAn issue has been fixed where the custom tooltip editor prevented the saving of and rejected comparison Liquid variables ( comparison_value , comparison_rendere…Fri 06 Nov
• FixedAn issue has been fixed where expanding a long tile note on a KPI visualization could cause the note to overlap the KPI value, comparison, and sparkline. Long e…Fri 06 Nov
• FixedAn issue has been fixed where scheduled deliveries to Google Sheets created duplicate spreadsheets instead of overwriting existing spreadsheets when filenames c…Fri 06 Nov
• FixedAn issue has been fixed where scheduled deliveries could fail if the schedule owner had Development Mode enabled and lacked develop permission on the schedule's…Fri 06 Nov
• FixedAn issue has been fixed where screen readers didn't announce the filter name or label for Yes/No filters and group filter controls on dashboards. This feature n…Fri 06 Nov
• FixedAn issue has been fixed where switching a database connection from default credentials to OAuth authentication could retain stale configuration fields and cause…Fri 06 Nov
• FixedAn issue has been fixed where Databricks OAuth refresh tokens were treated as expired after seven days on the client side even when a longer token lifetime was…Fri 06 Nov
• FixedAn issue has been fixed where creating a visual modeling canvas on a project-scoped connection failed unless advanced connection governance was enabled. This fe…Fri 06 Nov
• FixedAn issue has been fixed where updating roles for an Admin user who used the API could fail with an error. This feature now performs as expected.Fri 06 Nov
• FixedAn issue has been fixed where passing malformed dashboard filter attributes to the dashboard_filters API endpoints could cause an HTTP 500 error instead of retu…Fri 06 Nov
• FixedAn issue has been fixed where model set matching treated underscores in model names as wildcards, which could grant self-service access to connections that were…Fri 06 Nov
• FixedAn issue has been fixed where dashboard tag list filters and their drop-down menus resized horizontally when multiple values were selected. This feature now per…Fri 06 Nov
• FixedAn issue has been fixed where the GET /auth endpoint returned an HTTP 500 Internal Server Error instead of an HTTP 400 Bad Request response when the endpoint re…Fri 06 Nov
• FixedAn issue has been fixed where the data upload file picker could fail to accept XLS files. This feature now performs as expected.Fri 06 Nov
• FixedAn issue has been fixed where sending a POST /api/token request without a Content-Type header resulted in an HTTP 500 error. This feature now performs as expect…Fri 06 Nov
• FixedAn issue has been fixed where multi-select filter drop-down menus could immediately reopen after being closed. This feature now performs as expected.Fri 06 Nov
• FixedAn issue has been fixed where Show Percent of Previous arrows and labels overlapped bars instead of appearing between them on column charts that use the Modern…Fri 06 Nov
• FixedTime zone settings have been updated so that scheduled job triggers and table calculation time zone evaluations reflect recent regional daylight saving time (DS…Fri 06 Nov
• FixedAn issue has been fixed where a non-admin user could delete another user's undeployed development project through the API. This feature now performs as expected…Fri 06 Nov
• FixedAn issue has been fixed where Sankey charts that were created with Chart Config Override could fail with errors such as requires exactly two dimensions or cycli…Fri 06 Nov
• FixedAn issue has been fixed where favoriting or unfavoriting a dashboard or Look updated its last-accessed timestamp and erroneously removed the item from the Unuse…Fri 06 Nov
• FixedAn issue has been fixed where screen readers didn't announce individual data points on charts with 200 or more data points per series. This feature now performs…Fri 06 Nov
• FixedAn issue has been fixed where updating legacy Marketplace plugins could fail with a timeout error on instances with large Git repositories. This feature now per…Fri 06 Nov
• FixedAn issue has been fixed where switching Series Positioning from Stacked to Overlay or Grouped on an area, a column, or a bar chart didn't update the chart rende…Fri 06 Nov
• FixedAn issue has been fixed where scheduled deliveries to Slack, Google Drive, Cloud Storage, Microsoft Azure, and Dropbox could deliver corrupted single-column das…Fri 06 Nov
• FixedRoles in the identity provider (IdP) group role mapping drop-down menu are now sorted alphabetically and searchable on the SAML and OIDC configuration pages.Fri 06 Nov
• FixedAn issue has been fixed where hyperlink tooltips inside dashboard tile notes couldn't be clicked. This feature now performs as expected.Fri 06 Nov
• FixedAn issue has been fixed where numeric parameter filters without an allowed_values property were misclassified as tier filters in the dashboard filter editor, wh…Fri 06 Nov
• FixedAn issue has been fixed in the System Activity Conversational Analytics dashboard where the Conversations by Type and Weekly Conversations tiles incorrectly cou…Fri 06 Nov
• FixedAn issue has been fixed where editing a Conversational Analytics agent could overwrite its Code Interpreter setting, fail to immediately update active conversat…Fri 06 Nov
• FixedAn issue has been fixed in the System Activity Conversational Analytics dashboard where filtering by the Agent filter on the Engagement tab returned no results…Fri 06 Nov
• FixedIn the System Activity Conversational Analytics dashboard, the Top Agents and Agents Not Used in Last 30 Days tiles on the Engagement tab now display the agent…Fri 06 Nov
• FixedAn issue has been fixed in the System Activity Conversational Analytics dashboard where clicking a dashboard Agent ID on the Engagement tab linked to a nonexist…Fri 06 Nov

Managed Service for Apache Spark — 3

• AnnouncementNew Serverless Spark runtime versions : 1.2.90 2.2.90 2.3.43Mon 02 Nov
• AnnouncementNew Managed Service for Apache Spark (formerly Dataproc on Compute Engine) subminor cluster image versions : 2.1.121-debian11, 2.1.121-rocky8, 2.1.121-ubuntu20,…Mon 02 Nov
• FixedManaged Service for Apache Spark (formerly Dataproc on Compute Engine) and Serverless Spark : Included a fix for the eMudhra CVE in all latest image versions (2…Mon 02 Nov

Model Armor — 2

• FeatureSupport for template-specific exclusion rules in streaming sanitization ( StreamSanitizeUserPrompt and StreamSanitizeModelResponse ) is available in Preview . Y…Mon 02 Nov
• FeatureYou can enable or disable the child sexual abuse material (CSAM) filter in Model Armor templates and floor settings, and configure granular confidence levels (…Thu 05 Nov

Oracle Database@Google Cloud — 2

• FeatureOracle Database@Google Cloud supports creating custom DNS domains for your ODB Networks. You can use custom Domain Name Systems (DNS) to control the names of yo…Mon 02 Nov
• FeatureOracle Database@Google Cloud introduces Database Connections using which you can connect to your Oracle databases and execute SQL statements. For more informati…Tue 03 Nov

Security Command Center — 1

• DeprecatedData Security Posture Management (DSPM) is no longer available to new organizations. If DSPM is already enabled for your organization, you retain full access un…Thu 05 Nov

Security bulletin — 5

• GCP-2026-075Published: 2026-11-02 Description Description Severity Notes On Saturday, October 17, 2026, Google received a report from a security researcher regarding the co…Mon 02 Nov
• GCP-2026-076Published: 2026-11-02 Description Description Severity Notes A security vulnerability was discovered in Istio ( ISTIO-SECURITY-2026-008 ). For instructions and…Mon 02 Nov
• GCP-2026-077Published: 2026-11-03 Description Description Severity Notes Following the private-key compromise of intermediate Certificate Authorities (CAs) associated with…Tue 03 Nov
• GCP-2026-078Published: 2026-11-04 Description Description Severity Notes A vulnerability (CVE-2026-98432) was discovered in the Linux kernel IPv4 TCP stack. The flaw can ca…Wed 04 Nov
• GCP-2026-079Published: 2026-11-05 Description Description Severity Notes Per advisory VMSA-2026-0008 , Broadcom has identified an out-of-bounds write remote code execution…Thu 05 Nov

Sensitive Data Protection — 2

• FeatureSensitive Data Protection can inspect TIFF images for sensitive data, including multi-page TIFF images with up to 50 pages. TIFF images are supported in content…Mon 02 Nov
• ChangeSensitive Data Protection now records the last generated timestamp for data profiles with improved precision, close to the time when the resource data is read.Tue 03 Nov

VPC Service Controls — 1

• FeatureGeneral availability support for the following integration: Service ManagementTue 03 Nov

Virtual Private Cloud — 1

• FeatureGeneral Availability : VPC Flow Logs supports logging for IPv6 encapsulation flows. For more information, see IpConnection field format .Tue 03 Nov

Official Google Cloud references

• Google Cloud security bulletins — GCP-2026-075 through GCP-2026-079
• Google Cloud release notes (all products)
• Cloud Load Balancing release notes
• BigQuery release notes
• Security Command Center release notes
• VPC Service Controls release notes
• Google Kubernetes Engine release notes
• Compute Engine release notes