Alphabet's search and cloud division; $32bn Wiz deal; GTIG threat intel; DMA and IRGC exposure.
Last refreshed: 8 May 2026 · Appears in 5 active topics
Google is simultaneously under DMA order, named an IRGC target, and inside the EU sovereign cloud framework: what does its 2026 exposure say about where tech and geopolitics meet?
Timeline for Google
Mentioned in: AI Office gains enforcement powers in August
European Tech SovereigntyMentioned in: WARN Act untested: four AI cuts, zero enforcement actions
AI: Jobs, Power & MoneyMentioned in: Sovereign AI unit backs Alphabet-owned lab
UK Startups and InnovationMentioned in: Brussels gives no case number on Article 102 file
2026 FIFA World CupMentioned in: News Corp names $1.5bn Anthropic settlement
Media's AI Pivot- What is the DMA requiring Google to do in 2026?
- The European Commission issued preliminary compliance measures in April 2026 requiring Google to share anonymised search rankings, user queries, click data, and view metrics with rivals on FRAND terms. A binding decision is due 27 July 2026.Source: European Commission, DMA.100209
- What is S3NS and what is Google's role in it?
- S3NS is a joint venture between French defence group Thales and Google Cloud. It won a SEAL-2 slot in the EU's €180m sovereign cloud framework in April 2026. CISPE described the inclusion as 'sovereignty washing' because S3NS runs on US-owned infrastructure subject to the CLOUD Act.Source: European Commission, CISPE
- Why did Iran name Google a military target?
- On 1 April 2026, the IRGC named Google among 18 US technology companies in a targeting video, alleging the firms provided AI targeting infrastructure for strikes on Iran. Staff in Gulf offices were told to evacuate.Source: IRGC
- How much did Google pay for Wiz?
- Google completed its acquisition of cloud security vendor Wiz for $32 billion in March 2026, the largest pure-cybersecurity deal of the post-CrowdStrike era.Source: Google, SecurityWeek
- Why did Google buy Wiz for $32 billion?
- Google completed its $32 billion acquisition of cloud security vendor Wiz in March 2026, the largest pure-cybersecurity acquisition of the post-CrowdStrike era, to position Google Cloud as the dominant cloud security platform for enterprise customers globally.Source: Google / Wiz
- What is Google's GTIG and what did it find about Axios?
- Google Threat Intelligence Group (GTIG) is Google's nation-state threat intelligence unit, incorporating Mandiant. In May 2026, GTIG and Mandiant disclosed that North Korean actor UNC1069 planted a backdoor in the Axios npm package via maintainer phishing, affecting versions with 80–100 million weekly downloads.Source: Google GTIG / Mandiant
- What does the EU DMA ruling mean for Google Search?
- In April 2026 the European Commission issued preliminary DMA compliance measures requiring Google to share anonymised search rankings, click data and query metrics with rival search engines on FRAND terms. A binding decision is due 27 July 2026.Source: European Commission
- Is Google Cloud approved for EU sovereign cloud contracts?
- Partially. Google's S3NS joint venture with Thales won a SEAL-2 slot in the EU's €180m institutional cloud framework in April 2026, but not SEAL-3, because Google Cloud infrastructure is subject to US CLOUD Act orders. European cloud-native rivals dispute the SEAL-2 award as inadequate.Source: European Commission / CISPE
Background
Google, founded in 1998 by Larry Page and Sergey Brin, is the world's dominant search engine and a core division of Alphabet Inc., headquartered in Mountain View, California. It holds around 90 per cent of EU search market share. Google Cloud competes directly with Azure and AWS for enterprise AI workloads and, following the $32 billion acquisition of cloud security vendor Wiz in March 2026, is the largest pure-cybersecurity deal of the post-CrowdStrike era.
In April 2026, the European Commission issued preliminary DMA compliance measures requiring Google to share anonymised search rankings, user queries, click data, and view metrics with rival search engines and AI chatbots on FRAND terms; the consultation closed 1 May, with a binding decision due 27 July 2026 — six days before the EU AI Act AI Office gains GPAI enforcement powers. Google Cloud's joint venture with French defence group Thales — S3NS — won a slot in the EU's €180m institutional sovereign cloud framework at SEAL-2, not SEAL-3, because it runs on Google Cloud infrastructure subject to the US CLOUD Act.
On 1 April 2026, the IRGC named Google among 18 US technology companies designated as military targets over alleged AI targeting support for strikes on Iran.
Google's threat intelligence Arm, the Google Threat Intelligence Group (GTIG) — which incorporates Mandiant — is a primary source for nation-state attribution. In May 2026, GTIG and Mandiant jointly disclosed that North Korea-nexus actor UNC1069 phished an Axios npm package maintainer to introduce malicious dependency plain-crypto-js into two widely-distributed Axios versions with a combined 180+ million weekly downloads. The backdoor WAVESHAPER.V2 was live for under three hours. The Wiz acquisition — completed March 2026 — positions Google Cloud as the dominant cloud security player in the EU enterprise market, a position contested by European cloud-native firms and complicated by its CLOUD Act exposure. Google's 2026 exposure is multidimensional: DMA challenges its search monopoly; the IRGC threat frames its AI infrastructure as a military target; and the Wiz deal and S3NS JV together give it an ambitious but contested foothold in the EU sovereign cloud and security stack.
