As fast-growing companies expand their online presence, they often find themselves overwhelmed by a multitude of security recommendations for protecting Google Workspace. With time and resources stretched thin, the question remains: which controls will actually make the greatest difference in securing sensitive data? On September 23, BleepingComputer is hosting a live webinar titled “Breach autopsy: How fast-growing companies are breached through Google Workspace” to shed light on this critical issue.
The webinar features Rajan Kapoor, Vice President of Security at Material Security, and Rick Fitzgerald, President of Fireside Consulting LLC, who will delve into real-world examples of publicly documented Google Workspace breaches. Rather than working through a lengthy security checklist, the speakers will use these actual incidents to discuss which Google Workspace security controls are most critical, which may be overrated, and what they would prioritize if they were designing a security program for a fast-growing company from scratch.
Two particularly alarming attacks involved social engineering and malicious OAuth applications, used in combination to gain access to Google Workspace environments. These breaches provide a unique opportunity to move beyond theoretical risks and examine where defenses broke down, which overlooked weaknesses left users and data exposed, and what organizations could have done differently.
The critical first hours after the breaches were discovered are also under scrutiny, with the speakers examining how response decisions either limited or potentially worsened the impact. For lean security teams, the goal isn’t to implement every possible security control – it’s understanding where the greatest risks exist and prioritizing improvements based on the effort required and potential impact they can have.
The webinar will cover some of the most critical Google Workspace security controls that provide value for fast-growing companies with limited resources. It will also discuss which measures may receive more attention than their real-world impact warrants, highlighting commonly overlooked weaknesses that leave users, data, and connected applications exposed. Attendees will gain practical insights into what they can implement quickly to improve their organization’s security posture.
One of the key takeaways from this webinar is that implementing every possible security control isn’t the answer – rather, it’s understanding where attackers are finding opportunities and which defenses deserve the most attention. By examining real-world breaches, security teams can develop a more effective and efficient approach to securing Google Workspace environments.
As you prioritize your organization’s security needs, keep in mind that social engineering and malicious OAuth applications can be used by attackers to gain access to sensitive data. Don’t underestimate the importance of understanding where your defenses are weakest – it’s often the overlooked weaknesses that leave users and data exposed. Attend this webinar to learn from real-world examples and develop a practical framework for evaluating your security priorities, ensuring you’re making the most impact with your limited resources.
Source: Bleeping Computer — 2026-09-18