{"id":129802,"date":"2026-06-05T10:16:33","date_gmt":"2026-06-05T10:16:33","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2026\/06\/05\/google-quietly-cut-its-cyber-threat-team-while-betting-billions-on-ai\/"},"modified":"2026-06-05T10:17:33","modified_gmt":"2026-06-05T10:17:33","slug":"google-quietly-cut-its-cyber-threat-team-while-betting-billions-on-ai","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2026\/06\/05\/google-quietly-cut-its-cyber-threat-team-while-betting-billions-on-ai\/","title":{"rendered":"Google quietly cut its cyber threat team while betting billions on AI"},"content":{"rendered":"

<\/a>\n
<\/p>\n

\n

Google has trimmed workers throughout its cloud division, and the cuts have reached one of many firm’s most seen safety groups, at the same time as Alphabet commits document sums to synthetic intelligence.<\/em><\/p>\n

The reductions surfaced immediately, when Enterprise Insider reported that workers inside Google Cloud had been let go over roughly the earlier two weeks. The element that drew the sharpest consideration involved a single unit: the\u00a0Google Risk Intelligence Group<\/strong>, a crew that research hackers and nation-state operations and routinely publishes its analysis. That group was affected the day earlier than the report appeared, two individuals acquainted with the matter instructed the publication. Inside hours, a few of those that misplaced their jobs had been describing the expertise on LinkedIn, turning an inside restructuring right into a public occasion.<\/p>\n

What makes the episode notable isn’t the uncooked variety of jobs, which Google has not disclosed, however the place the axe fell. Safety and risk analysis are features that corporations have a tendency to guard throughout downturns, as a result of the price of a breach dwarfs the wage of an analyst. Reducing in that space, whereas concurrently elevating tens of billions of {dollars} for AI, alerts a reordering of priorities fairly than a retreat from spending.<\/p>\n

What occurred, and when<\/h2>\n

Based on Enterprise Insider, the layoffs rolled by means of Google Cloud over a span of about two weeks, they usually weren’t confined to at least one crew. The cuts additionally touched\u00a0Mandiant<\/strong>, the cybersecurity firm Google acquired in 2022, together with different components of the broader Google Cloud organisation. The precise headcount, and the complete reasoning, stayed murky. In a minimum of one occasion, in keeping with the report, Google cited a have to reinvest in progress areas similar to AI to justify the choice.<\/p>\n

Google folded Mandiant into Google Cloud in September 2022, finishing a deal valued at roughly 5.4 billion {dollars}. The acquisition introduced a long time of incident-response work and a revered threat-intelligence apply below one roof, and it was offered on the time as a option to harden Google Cloud’s safety stack in opposition to an increasing set of attackers. That historical past is a part of why the newest cuts landed with drive contained in the safety neighborhood: a unit assembled by means of a multibillion-dollar buy is now absorbing reductions like another value centre.<\/p>\n

The timing is exact sufficient to matter. The Risk Intelligence Group was hit sooner or later earlier than the report; the broader cloud cuts unfolded throughout the fortnight previous it. Google issued no formal announcement and provided no figures, which left LinkedIn, fairly than a press launch, as the primary public document of what had occurred.<\/p>\n

A distinguished safety unit absorbs the blow<\/h2>\n

The Risk Intelligence Group sits in an uncommon place inside Google. Based on Enterprise Insider, it ranks among the many firm’s prime safety models, and it’s identified for publishing analysis about hackers – the type of work that shapes how defenders throughout industries reply to lively campaigns. Its output is learn by safety groups far past Google’s personal clients, which provides the group a attain that’s laborious to quantify on a steadiness sheet.<\/p>\n

That public-facing position traces again by means of a sequence of acquisitions. The lineage runs by means of iSIGHT Companions and FireEye earlier than arriving at Mandiant, after which at Google. Every step folded frontline experience into a bigger platform, and every step was justified, partially, by the argument that\u00a0risk intelligence<\/strong>\u00a0had change into too vital to depart to smaller, standalone companies. The present cuts check that argument from the opposite route, by asking how a lot of that functionality a single proprietor is ready to fund when capital is being steered elsewhere.<\/p>\n

Why would an organization scale back a worthwhile cloud division’s safety analysis whereas pouring cash into compute? The reply provided, a minimum of in a single case, was reallocation. Spending was not falling; it was transferring.<\/p>\n

The goodbye on LinkedIn<\/h2>\n

The human form of the layoffs emerged by means of a single post<\/a>. Andrew Kopcienski, who described himself as a principal risk intelligence analyst for Google’s cyber risk intelligence work, introduced his exit publicly. “I used to be laid off final night time, alongside a number of different nice people at Google Risk Intelligence Group,” he wrote, including that he meant to spend a couple of days centered on household earlier than looking for one thing new.<\/p>\n

His message learn as a profession retrospective as a lot as a discover. He had labored by means of iSIGHT, FireEye and Mandiant earlier than Google, and he pointed to involvement in a few of the defining episodes of latest cybersecurity, naming Log4Shell and SolarWinds. He singled out collaboration with defenders in Ukraine “throughout and for the reason that invasion” as his proudest second. The tone was measured fairly than bitter. He known as the departure “bittersweet,” describing a spot the place he had felt capable of “truly do some good on this planet,” and he provided a word that doubled as a parting argument: “working for Google positively is not the one option to do good issues that matter with good individuals.”<\/p>\n

The put up drew greater than 1,100 reactions, 27 feedback and 46 reposts. The replies blended condolences with recruitment pitches, a sequence that has change into a recognisable ritual of technology-sector layoffs on the platform. A number of commenters questioned whether or not the spherical was tied to AI, a query that Google’s public assertion didn’t straight resolve.<\/p>\n

What Google stated, and what it left unsaid<\/h2>\n

Google declined to element the scope of the cuts. “We often consider our inside constructions to make sure we’re finest positioned to satisfy the evolving calls for of our clients and the business,” an organization spokesperson instructed Enterprise Insider. The sentence confirmed nothing about numbers and drew no express line to AI, at the same time as one individual acquainted with the matter stated the corporate had, in a minimum of one occasion, cited reinvestment in AI to justify the transfer, in keeping with the report.<\/p>\n

The hole between the official language and the reported rationale is itself a part of the story. A press release about evaluating inside constructions can describe nearly any reorganisation. The reported element – that AI reinvestment was named in a minimum of one case – factors to one thing extra particular: a switch of sources from established features towards mannequin improvement and compute. Neither account contradicts the opposite, however solely one in all them explains why a safety analysis crew could be on the checklist.<\/p>\n

The spending paradox<\/h2>\n

The cuts are tough to learn as cost-cutting within the typical sense, as a result of Alphabet is spending extra, not much less. Days earlier than the layoffs surfaced, on June 3,\u00a0Alphabet detailed an equity raise of roughly 85 billion dollars to fund AI infrastructure it describes as supply-constrained against demand<\/a>, with 2026 capital expenditure guided to between 180 billion and 190 billion {dollars}. That isn’t the posture of an organization retrenching. It’s the posture of an organization reallocating aggressively towards one precedence.<\/p>\n

The cloud division itself has been a progress engine.\u00a0Alphabet’s cloud revenues grew 63 percent in the first quarter of 2026<\/a>, a fee that, in opposition to a big base, marks the unit as one of many firm’s strongest performers.\u00a0In its Q1 2026 results, Alphabet reported 109.9 billion dollars in consolidated revenue and total headcount of 194,668 employees, up from 185,719 a year earlier<\/a>, with quarterly capital expenditure of 35.7 billion {dollars} and roughly 60 p.c of that determine directed to servers. Headcount rose yr over yr at the same time as particular groups had been trimmed, which underscores the selective nature of the reductions.<\/p>\n

Set in opposition to these numbers, the layoffs look much less like a response to weak point and extra like a call about the place progress {dollars} ought to sit. The capital is flowing towards AI compute and away from a minimum of some features that, till just lately, had been thought-about untouchable.\u00a0Capital expenditure<\/strong>\u00a0at this scale forces decisions, and the selection right here seems to have run by means of the safety organisation.<\/p>\n

A wider sample throughout Massive Tech<\/h2>\n

Google’s transfer suits a sequence that has performed out throughout the business by means of 2026, with AI repeatedly named as the explanation. Based on Enterprise Insider, Meta laid off 10 p.c of its workers final month, whereas Coinbase and Block used AI to justify giant cuts earlier within the yr. Cybersecurity has not been spared: the report famous that Cloudflare let go of greater than 1,100 workers final month because it prepares for what it known as the “agentic AI period.” The framing is constant throughout these circumstances – AI is solid not solely as a product line however as a rationale for lowering the workforce that preceded it.<\/p>\n

That is additionally not the primary time Google Cloud has lower quietly. Enterprise Insider reported that, final yr, the division let go of some workers, principally in user-experience roles. The present spherical is broader within the features it touches, reaching into safety analysis and the Mandiant model that Google paid a premium to accumulate. The sample throughout the sector means that the query is not whether or not AI funding will reshape headcount, however which groups will likely be requested to fund it.<\/p>\n

The relevance to promoting and advertising and marketing professionals is extra direct than it’d first seem. Google Cloud is the infrastructure layer beneath a considerable share of the information processing, analytics and safety that the promoting ecosystem relies on, and the\u00a0risk intelligence<\/strong>\u00a0work now being trimmed is a part of what protects the platforms entrepreneurs depend on. When an organization reorders its safety organisation to fund AI, it’s making an announcement about priorities that extends throughout each product the division helps.<\/p>\n

The workforce sign is in keeping with what surveys have been recording.\u00a0Research has found that 32 percent of enterprises expect AI-related workforce reductions of 3 percent or more in the year ahead<\/a>, a determine that frames Google’s cuts as a part of a broader recalibration fairly than an remoted occasion. The advertising-technology sector has already felt a model of this:\u00a0earlier in 2026, ad tech firm Scope3 carried out layoffs as the economics of building agentic advertising infrastructure came under pressure<\/a>, affecting each industrial and engineering groups. The identical AI economics reshaping search outcomes and advert shopping for are actually reshaping the staffing of the businesses that function these techniques.<\/p>\n

Whether or not the online impact on employment is contraction or reinvention stays contested.\u00a0Some analysis argues that AI may ultimately create more marketing roles than it eliminates, by lowering the cost of experimentation and expanding what small teams can attempt<\/a>. Google’s resolution doesn’t settle that debate, nevertheless it provides an information level on the opposite aspect of the ledger, in a perform that was alleged to be insulated. For an business watching how AI funding interprets into organisational change, the lower to a marquee safety unit is a concrete studying of the place one in all its largest infrastructure suppliers is putting its bets.<\/p>\n

Timeline<\/h2>\n