Google Workspace breaches don’t always begin with sophisticated exploits or stolen passwords. Sometimes attackers simply convince users to grant them the access they need.
Tomorrow, September 23, BleepingComputer will host a live webinar titled “Breach autopsy: How fast-growing companies are breached through Google Workspace” with Material Security.
The webinar will feature Rajan Kapoor, Vice President of Security at Material Security, and Rick Fitzgerald, President of Fireside Consulting LLC, examining real, publicly documented Google Workspace breaches and the decisions organizations made during the critical first hours of an incident.
The discussion will include two attacks that combined social engineering with malicious OAuth applications to gain access to Google Workspace environments.
These attacks demonstrate how threat actors can exploit trust and application authorization rather than relying solely on stolen credentials or software vulnerabilities.
But gaining access is only the beginning of the story.
The speakers will examine what happened after the breaches were discovered, which decisions during the critical first hours helped limit or worsen their impact, and which overlooked weaknesses left users, data, and connected applications exposed.
The webinar will also look beyond lengthy security checklists to discuss which Google Workspace security controls provide the greatest value, which may be overrated, and what the speakers would prioritize if they were building a security program for a fast-growing company from scratch.
Attendees will receive a practical look at how real Google Workspace breaches unfold and the security and response measures that matter most for lean security teams.
Understanding how attackers gain access is only one part of learning from a breach.
Once suspicious access is discovered, security teams need to understand what happened, determine what users and data may have been exposed, and make decisions that can directly affect the scope and impact of the incident.
By examining real Google Workspace breaches from initial access through the first hours of response, this webinar will provide a practical look at both sides of the problem: how attackers get in and what defenders can do next.
Rather than presenting another long list of best practices, the discussion will focus on lessons from actual incidents and the security improvements that can have the greatest impact for organizations with limited resources.
Join us tomorrow to see how real Google Workspace breaches unfolded and what security teams can learn from the attacks and the response that followed.
ShinyHunters hacks Clop leak site, threatens to extort ransomware gang
North Korean WaterPlum hackers infected 30,000 devices worldwide
Researchers escape OpenAI Codex sandbox to run commands on host
Overdue a password health-check? Audit your Active Directory for free
Find out how long recovery really takes — and what it costs. Read the 2025 BCDR Report.
Overdue a password health-check? Audit your Active Directory for free
Watch a working exploit hit live controls and see exactly what blocks, detects, or misses
Automate Onboarding and Access Reviews with No-Code IGA: See how it works
Terms of Use – Privacy Policy – Ethics Statement – Affiliate Disclosure
Read our posting guidelinese to learn what content is prohibited.



