[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXN2f_JK_1azqGnvriO0vx2-xS10Wxf9RkhJtw7P9PPs":3},{"article":4,"iocs":49,"watch_terms":50,"solutions":51,"lesson":142},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"6e0f99d0-4a44-4f76-97c2-b5d581d37a2f","Webinar: How malicious OAuth apps can lead to Google Workspace breaches","webinar-how-malicious-oauth-apps-can-lead-to-google-workspace-breaches-0952b9","Attackers can combine social engineering with malicious OAuth applications to gain access to Google Workspace data without relying solely on stolen passwords. This webinar examines two attacks to show how these breaches unfold and which security controls can help stop them. [...]","Attackers are leveraging malicious OAuth applications combined with social engineering to gain unauthorized access to Google Workspace data, bypassing the need for stolen passwords. A forthcoming webinar will dissect two such attacks, illustrating how users are tricked into granting permissions to harmful apps and the subsequent impact on organizations. The session will also focus on essential security controls and incident response strategies for defending cloud environments.","Webinar to detail how malicious OAuth apps and social engineering breach Google Workspace.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fwebinar-how-malicious-oauth-apps-can-lead-to-google-workspace-breaches\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F09\u002F13\u002Foauth-breach.jpg","2026-09-14T12:15:23+00:00","2026-09-14T14:00:11.313719+00:00",7,[17,20,23],{"name":18,"type":19},"Google Workspace","product",{"name":21,"type":22},"OAuth","technology",{"name":24,"type":25},"Material Security","vendor","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":26,"icon":28,"name":29,"slug":30},null,"Threat Intelligence","threat-intelligence",[32,37,42,47],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":38},{"id":39,"icon":28,"name":40,"slug":41},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":43},{"id":44,"icon":28,"name":45,"slug":46},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",{"category":48},{"id":26,"icon":28,"name":29,"slug":30},[],[24,18],{"controls":52,"vendors":135},[53,82,108],{"slug":54,"name":55,"problem":56,"products":57},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[58,66,74],{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"slug":83,"name":84,"problem":85,"products":86},"saas-security-posture","SaaS security posture management (SSPM)","Business apps like Microsoft 365 and Salesforce stop leaking through risky settings and connected apps.",[87,93,100],{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":88,"product_name":89,"url":91,"description":92},"appomni","AppOmni","\u002Fvendor-logos\u002Fappomni.png","https:\u002F\u002Fappomni.com\u002F","SaaS security posture management for platforms such as Salesforce, Microsoft 365 and ServiceNow.",{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":95,"url":98,"description":99},"obsidian-security","Obsidian Security","\u002Fvendor-logos\u002Fobsidian-security.png","obsidian","https:\u002F\u002Fwww.obsidiansecurity.com\u002F","SaaS posture management and detection of account and integration compromise.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-shield","Falcon Shield","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Ffalcon-shield\u002F","SaaS security posture management, from CrowdStrike's acquisition of Adaptive Shield.",{"slug":109,"name":110,"problem":111,"products":112},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[113,120,127],{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":114,"product_name":117,"url":118,"description":119},"sosafe","SoSafe","\u002Fvendor-logos\u002Fsosafe.png","SoSafe Awareness Platform","https:\u002F\u002Fsosafe-awareness.com\u002F","Behaviour-based awareness training and phishing simulation in many languages.",{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":109,"product_name":124,"url":125,"description":126},"knowbe4","KnowBe4","\u002Fvendor-logos\u002Fknowbe4.png","KnowBe4 Security Awareness Training","https:\u002F\u002Fwww.knowbe4.com\u002Fproducts\u002Fsecurity-awareness-training","Training library and simulated phishing with reporting.",{"vendor_slug":128,"vendor_name":129,"vendor_logo":130,"product_slug":131,"product_name":132,"url":133,"description":134},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-sat","Huntress Managed Security Awareness Training","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fsecurity-awareness-training","Security awareness training and phishing simulation, managed for you.",[136],{"slug":137,"name":138,"logo_path":139,"roles":140},"google","Google","\u002Fvendor-logos\u002Fgoogle.png",[141],"affected",{"slug":143,"title":144,"body":145,"framework_refs":146,"framework_notes":159},"malicious-oauth-apps-bypass-passwords-to-breach-google-workspace","Malicious OAuth Apps Bypass Passwords to Breach Google Workspace","Attackers are exploiting OAuth application authorization flows combined with social engineering to trick users into willingly granting third-party apps broad access to Google Workspace data — no stolen password required. This is particularly dangerous because traditional credential-based defenses like MFA do not protect against OAuth consent phishing. Once a malicious app is authorized, attackers can silently access emails, files, calendars, and contacts with persistent access that survives password resets. Organizations often lack visibility into which OAuth apps have been granted access, making detection and response slow. This attack vector highlights that user permissions and app governance are as critical as password hygiene.",[147,148,149,150,151,152,153,154,155,156,157,158],"CIS Control 4: Controlled Use of Administrative Privileges","CIS Control 6: Access Control Management","CIS Control 14: Security Awareness and Skills Training","NIST SP 800-53 AC-3: Access Enforcement","NIST SP 800-53 AC-6: Least Privilege","NIST SP 800-53 SI-10: Information Input Validation","NIST SP 800-53 IR-5: Incident Monitoring","NIST CSF ID.AM-3: Organizational communication and data flows mapped","GDPR Article 32: Security of Processing","GDPR Article 33: Notification of a Personal Data Breach","ISO\u002FIEC 27001 Annex A.9.4: System and Application Access Control","ITIL Change Management: Third-party service authorization reviews",{}]