Google Launches AI Ransomware Detection for Drive

Google has launched an enhanced AI-powered ransomware detection and recovery system for Google Drive, making it available to all Workspace users as of this week. The feature, which automatically pauses file syncing upon detecting suspicious activity, aims to protect cloud-stored files from encryption attacks that have increasingly targeted organizations worldwide.

The rollout follows a beta phase that began last September, during which Google refined the technology based on millions of real-world ransomware samples. According to a Google Workspace Updates blog post, the latest AI model now identifies up to 14 times more infections than the initial version, enabling faster and broader threat recognition. This improvement allows the system to scan files during synchronization on the desktop app for Windows and macOS, flagging unusual encryption patterns before widespread damage occurs.

When potential ransomware activity is detected, Google Drive immediately halts the upload of affected files to prevent the malware from spreading across connected devices or shared accounts. Users receive in-app notifications and email alerts detailing the issue and providing step-by-step recovery...