GoKawiilBleepingComputer and Material Security to detail Google Workspace OAuth attacks in webinar
BleepingComputer is hosting a live webinar on September 23, 2026, with Material Security's Rajan Kapoor and Fireside Consulting's Rick Fitzgerald, who will dissect two real breaches of Google Workspace environments carried out through malicious OAuth applications and social engineering rather than stolen passwords. The session will walk through how the attacks unfolded, the security gaps that let them succeed, and the response decisions made in the early hours of each incident.
GoKawiil's interpretation of the reporting above, not reported fact.
OAuth-based attacks sidestep passwords entirely, so multi-factor authentication and credential monitoring alone won't stop them, exposing a blind spot for many organizations. As companies grow quickly and connect more third-party apps to Google Workspace, tracking which applications hold access becomes as critical as managing user credentials.
- Attackers can breach Google Workspace by tricking users into authorizing malicious OAuth apps, not just stealing passwords.
- The webinar will examine two real-world breach case studies and their early response decisions.
- Speakers will share which security controls matter most for fast-growing companies building Workspace security programs.
Source: bleepingcomputer.com, 2026-09-14
Published there as: “Webinar: How malicious OAuth apps can lead to Google Workspace breaches”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.