Google Cloud CISO publishes 2027 security forecast on agentic threats

[Google Cloud] Google Cloud CISO Chris Betz published the company's 2027 cybersecurity forecast on November 9, 2026, drawing on insights from leaders at Google, Google Cloud and Mandiant. Betz said that at the start of the year only a few organizations used LLMs and agents to find and fix vulnerabilities, while today it is happening at scale across enterprises, and that agentic hacking's scale, speed and sophistication are outpacing human-only response. Karthik Narain, chief product and customer officer at Google Cloud, said the risks in 2027 will not be just server outages or stolen databases, and that the data and technology foundation agents rely on also matters; every consequential action by an autonomous system requires a complete, tamper-proof decision trace recording inputs, how the model reasoned, which tools it called, what parameters it passed and why policy allowed it, so teams can reconstruct, validate and audit automated decisions before scaling. Ramya Chitrakar, vice-president of Engineering at Google Cloud, said 2027 is the year analysts stop chasing alerts and start shaping outcomes.