🧰 Google Workspace

The items that name it 15

• CISA Publishes Significant Updates to ScubaGear and ScubaGoggles
  articleas affected products2026-10-26It is written here as Google Workspace (GWS).

  GWS

• The Current Landscape of OAuth Attacks
  articleas classification.technologies2026-10-22
• From Phishing to LLMjacking: Threat Actors Targeting Cloud Billing Accounts for LLM Usage
  writeupas classification.technologies2026-10-20
• Google Doc Sidebar Sends Mac and Windows Users Down Different Paths to Malware
  writeupas classification.technologies2026-09-15
• Going with the Flow(s): Distinct Clusters Target Individuals of Interest to Russia
  articleas classification.technologies2026-08-20
• Post-DEF CON Phishing Uses Malicious Google Doc to Deliver Malware
  writeupas classification.technologies2026-08-19
• Critical One-Click Vulnerability in Atlassian's Rovo AI Exposed Enterprise Data
  articleas classification.technologies2026-08-08
• UNC6671 Rebrands: Multi-Brand Vishing Extortion Targets Financial Services and Enterprise Cloud Environments
  articleas affected products2026-08-06
• Lateral Movement Attack: Techniques, Detection & Prevention
  writeupas affected products2026-07-01

  Identity platform monitored by Huntress Managed ITDR for lateral movement/identity anomalies

• What MDM can't protect on developer machines (and what to do about it)
  articleas affected products2026-05-28It is written here as Google Workspace (OAuth access).

  A Vercel employee granted OAuth access to a Chrome extension, which was later abused

• From Cookies to Keys: The Threat of Session Hijacking
  articleas affected products2026-05-26

  Session cookies harvested by infostealers; sold for $50-$200+.

• n8n Cybersecurity Workflows
  repoas tools2026-05-06

  OAuth app risk auditing, mail security

• Why BEC Is Now an Identity Problem
  articleas affected products2026-03-05

  Cloud productivity platform targeted via identity-driven BEC attacks, including Gmail as a lateral movement launchpad

• #ShadyHacks with Kyle Hanslovan
  writeupas affected products2025-11-26

  Mentioned as another identity platform where account login can lead to lateral movement and access to everything connected.

• Device Code Phishing: OAuth 2.0 Attacks in Google & Azure
  writeupas classification.technologies2025-02-06