Apple Expands Private Cloud Compute to Google Cloud for Apple Intelligence
Apple said some Apple Intelligence requests that exceed on-device limits will now run in Google Cloud under an expanded Private Cloud Compute (PCC) architecture, while simpler tasks continue to be processed locally and other cloud workloads remain on Apple-operated servers. The company said its newer model stack includes on-device AFM 3 Core and AFM 3 Core Advanced, Apple-hosted AFM 3 Cloud and ADM 3 Cloud, and AFM 3 Cloud Pro, which runs on Google-owned NVIDIA hardware for more demanding queries.
Apple said the privacy model is unchanged despite the move to third-party infrastructure, with protections built around stateless processing, non-targetability, no privileged runtime access, and verifiable transparency. To enforce those guarantees on Google Cloud, Apple said it is using NVIDIA Confidential Computing, Intel TDX, Google’s Titan security chip, Apple-signed software attestation, and a cryptographically verifiable append-only ledger of approved hardware; the company also plans to publish PCC binaries and extend researcher access through the Apple Security Bounty program.
Get ahead of threats like this
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
How this story unfolded
3 events from the most recent confirmed update back to the earliest known activity.
Apple says it will publish PCC binaries and offer researcher access
Apple said it plans to publish Private Cloud Compute binaries and provide research access through the Apple Security Bounty program. This was presented as part of the transparency and verification measures for PCC running in third-party environments.
Apple expands Private Cloud Compute to Google Cloud
Apple said it is extending Private Cloud Compute to third-party Google Cloud data centers for Apple Intelligence workloads that exceed on-device limits. Apple stated that the privacy and security model remains the same and relies on confidential computing, hardware attestation, and a cryptographically verifiable append-only ledger for approved Google Cloud hardware.
Apple describes Apple Intelligence hybrid AI architecture
Apple described a hybrid Apple Intelligence design in which simpler requests are handled on-device and more advanced tasks are sent to cloud models, including models running on Apple-operated servers and Google-owned hardware. The company said supported devices use AFM 3 Core, while higher-end hardware uses AFM 3 Core Advanced for features such as improved dictation and a more expressive Siri voice.
Related entities
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Sources
2 references tracked. Mallory keeps watching after this page renders.
See the full picture, correlated to your attack surface.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Related stories
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Google Private AI Compute Security Architecture and Review
Google has introduced Private AI Compute, a privacy-enhancing technology designed to process AI queries securely in the cloud while maintaining on-device-level privacy guarantees. The system leverages Trillium TPUs and Titanium Intelligence Enclaves, utilizing AMD-based Trusted Execution Environments (TEEs) to encrypt and isolate memory, ensuring that user data remains inaccessible to Google and protected from physical exfiltration attacks. The infrastructure supports mutual attestation and encrypted communication between trusted nodes, with strict controls to prevent unauthorized access and ensure that only validated workloads are executed. To assess the security of this new platform, Google engaged NCC Group for a comprehensive review, including architectural analysis and detailed cryptographic assessments of key components such as the Oak Session Library, attestation mechanisms, and the T-Log system. The review also covered configuration and source code analysis to evaluate the robustness of the system's privacy and security controls. This independent evaluation highlights Google's efforts to provide strong privacy assurances for cloud-based AI processing, addressing concerns about data confidentiality and integrity in modern cloud environments.
Mar 21, 2026
Palo Alto Networks and Google Cloud Partnership to Secure AI Infrastructure
Palo Alto Networks and Google Cloud have announced an expanded, multibillion-dollar partnership aimed at embedding advanced security capabilities directly into Google Cloud’s AI and infrastructure services. The agreement, reportedly valued at nearly $10 billion over several years, will see Palo Alto Networks’ Prisma AIRS platform integrated with Google Cloud offerings such as Vertex AI and Agent Engine, providing end-to-end protection for AI workloads, data, and development tools. This collaboration is a response to the increasing frequency of attacks on AI infrastructure, with Palo Alto Networks reporting that 99% of surveyed organizations experienced at least one attack on their AI systems in the past year. The partnership is designed to address the complexity of securing hybrid and multicloud environments as enterprises rapidly scale AI deployments. By aligning Palo Alto’s network and AI security solutions with Google Cloud’s infrastructure, the companies aim to deliver a unified security experience, reduce operational complexity, and ensure consistent enforcement of security policies. The deal also involves Palo Alto Networks migrating key internal workloads to Google Cloud, further deepening the strategic relationship between the two firms.
Mar 21, 2026
Apple Details Privacy-First AI Strategy as Siri System Prompt Leaks
Apple executives used WWDC and a subsequent interview to position the company’s AI strategy around practical assistance, privacy, and tight product integration rather than emotionally driven chatbot experiences. Craig Federighi said Siri is designed to help users complete tasks and retrieve information, while Greg Joswiak said Apple is not building AI for its own sake. Apple also highlighted privacy-preserving personalization through on-device processing and **Private Cloud Compute**, alongside security-focused features such as automatic breached-password remediation in the Passwords app and Safari and new child safety controls for highly restricted iPhones. At the same time, reverse engineers reportedly extracted and published Apple’s new AI-driven Siri system prompt from the iOS 27 developer beta, exposing more than 1,300 lines of instructions governing alignment, reasoning, multimodal behavior, and tool use. The leaked materials indicate Siri is designed to disclose limitations, resist adversarial prompt manipulation, avoid anthropomorphic behavior, and rely on structured JSON entities derived from device data such as contacts, email, calendars, and web searches, with actions constrained through deterministic function calls and clarification workflows. The publication of the prompt on public platforms has given AI engineers and security researchers an unusual look at how Apple is implementing the privacy- and safety-focused approach it is publicly promoting.
Jun 13, 2026