A forthcoming webinar from BleepingComputer will examine real-world Google Workspace breaches, with an emphasis on how attackers get in and what happens immediately after detection. The session will reportedly use actual incidents as case studies.
According to the announcement, the attacks in question involve social engineering and malicious OAuth applications. The discussion will trace the full arc of an intrusion, from initial access to the critical early phase of incident response.
The webinar is also intended to help security teams prioritize. It will highlight which security controls and response decisions tend to make the biggest difference during a Workspace compromise. Since this is based on a single source, no conflicting perspectives are noted.