GOOGLE TO CRITICAL INFRA ORGS: OUR AI SCANNERS WON'T BE EVIL, PROMISE

Summary from the TLDR InfoSec newsletter

Google and Wiz launched Scan for Good using Gemini 3.8 Flash Cyber and Red Agent with authorized scans targeting public websites, APIs, and applications, while human researchers validate findings and handle disclosure. Red Agent found a GitHub Actions injection flaw in Snowflake's connector, allowing command execution. Other cases exposed 8.8 million files, hospital systems, elderly residents' data, and railway administrator sessions.