Anthos clusters on AWS
Security
Multiple security vulnerabilities have been identified in the OpenSSL library. The most significant finding is CVE-2025-15467, a critical vulnerability that might allow for remote code execution (RCE) or denial of service (DoS) attacks via network-based vectors.
For more details, see the GCP-2026-006 security bulletin.
Anthos clusters on Azure
Security
Multiple security vulnerabilities have been identified in the OpenSSL library. The most significant finding is CVE-2025-15467, a critical vulnerability that might allow for remote code execution (RCE) or denial of service (DoS) attacks via network-based vectors.
For more details, see the GCP-2026-006 security bulletin.
Bigtable
Feature
Bigtable has a unified, customizable system insights dashboard. This dashboard includes predefined metrics and other Google Cloud metrics. This feature is generally available (GA). For more information, see Customize the system insights dashboard.
Carbon Footprint
Fixed
We have corrected the issue resulting in incomplete Cloud Run emissions data for November and December 2025. Customers who used Cloud Run during this period can now access the corrected data.
Action Required: To see the corrected Cloud Run emissions data, schedule a manual data backfill for November and December 2025. Note that there is a half-month lag of our data release. For example, to backfill November and December 2025 data, run the backfill for December 15, 2025 and January 15, 2026, which will update the data for November and December 2025 in your BigQuery table.
Cloud Quotas
Feature
Folder level and organization level support for the quota adjuster feature is available in Preview through the Google Cloud console, the Cloud Quotas API, gcloud quotas beta CLI, Terraform, and Cloud Client Libraries. For more information, see the documentation about how to enable the quota adjuster through the Cloud Quotas API.
Cloud Storage
Announcement
Object change notification is deprecated on January 30, 2026. To generate notifications for changes to objects, use Pub/Sub notifications for Cloud Storage instead.
Dataproc
Announcement
New Serverless for Apache Spark runtime versions:
- 3.0.4
Announcement
Dataproc on Compute Engine: The following subminor image versions announced on January 24, 2026 have been rolled back:
- 2.0.157-debian10, 2.0.157-ubuntu18, 2.0.157-rocky8
- 2.1.106-debian11, 2.1.106-ubuntu20, 2.1.106-ubuntu20-arm, 2.1.106-rocky8
- 2.2.74-debian12, 2.2.74-ubuntu22, 2.2.74-ubuntu22-arm, 2.2.74-rocky9
- 2.3.21-debian12, 2.3.21-ml-ubuntu22, 2.3.21-rocky9, 2.3.21-ubuntu22, 2.3.21-ubuntu22-arm
Google SecOps
Announcement
The following v2 connectors, which utilize Google Storage Transfer Service (STS), are now in General Availability:
- Google Cloud Storage v2
- Amazon S3 v2
- Google Cloud Storage (Event Driven)
- Amazon SQS v2
- Azure Blobstore v2
Google SecOps SIEM
Announcement
The following v2 connectors, which utilize Google Storage Transfer Service (STS), are now in General Availability:
- Google Cloud Storage v2
- Amazon S3 v2
- Google Cloud Storage (Event Driven)
- Amazon SQS v2
- Azure Blobstore v2
Announcement
The following v2 connectors, which utilize Google Storage Transfer Service (STS), are now in General Availability:
- Google Cloud Storage v2
- Amazon S3 v2
- Google Cloud Storage (Event Driven)
- Amazon SQS v2
- Azure Blobstore v2
Model Armor
Change
The prompt injection and jailbreak detection
filter for the Mumbai (asia-south1) and Singapore (asia-southeast1) regions
is upgraded to improve detection accuracy and reduce the rate of false positives.
Spanner
Feature
Spanner supports the UUID data type for both
GoogleSQL and PostgreSQL-dialect databases. This
data type stores universally unique identifiers (UUIDs) as 128-bit values.
You can use the GoogleSQL
NEW_UUID()
function or the PostgreSQL
gen_random_uuid() to
function to create UUID values.
For more information, see Use a universally unique identifier (UUID).
Source: Google Cloud Platform
