Gemini picks up criminal activity buried in dark web noise

Google announced a new dark web intelligence feature in Google Threat Intelligence that uses Gemini to autonomously build organization-specific profiles, analyze millions of dark web events daily, and correlate signals (like revenue, location, and system types) to surface relevant threats. The capability is intended to detect activity such as initial access brokers offering credentials that legacy keyword-based tools might miss, and is supported by Google Threat Intelligence Group analysts for context and refinement.