Google Workspace

CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster

CISA, cybersecurity, GitHub, Google Workspace, Government, Microsoft 365, News, open source, software, USA /

CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster 2026-10-28 at 11:38 By Mirko Zorz CISA released ScubaGear v2.0 and ScubaGoggles v1.1.0, new versions of the open-source tools it publishes to check Microsoft 365 and Google Workspace settings against its security baselines. The agency calls ScubaGear v2.0 the most comprehensive update to […]

CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster Read More »

The modern attack chain: Rethinking Google Workspace security in the age of AI

AI, attack, cybersecurity, Don't miss, Google Workspace, Hot stuff, Material Security, News, opinion /

The modern attack chain: Rethinking Google Workspace security in the age of AI 2026-09-16 at 08:00 By Help Net Security Over the past two months, I’ve written about the Vercel breach and the Composio breach separately. Both offer lessons to learn on their own. But reading them together, I keep coming back to the same […]

The modern attack chain: Rethinking Google Workspace security in the age of AI Read More »

Product showcase: Material unifies Google Workspace email, file & OAuth defense

email security, Google Workspace, Material Security, News, Product showcase /

Product showcase: Material unifies Google Workspace email, file & OAuth defense 2026-08-05 at 08:00 By Help Net Security Here’s an uncomfortable truth: the attack that gets you won’t look like an attack. It’ll look like a normal login, a normal file share, a normal permission request you clicked past without reading. You don’t have a […]

Product showcase: Material unifies Google Workspace email, file & OAuth defense Read More »

Google adds FIDO2 keys and phone passkeys to Windows login via GCPW

2FA, authentication, cybersecurity, Google, Google Workspace, hardware, News, security key /

Google adds FIDO2 keys and phone passkeys to Windows login via GCPW 2026-07-14 at 13:35 By Anamarija Pogorelec Google has started rolling out FIDO2-compliant physical security key support as a second factor for authentication in Google Credential Provider for Windows (GCPW) to all Google Workspace customers. GCPW is a free tool that lets users sign […]

Google adds FIDO2 keys and phone passkeys to Windows login via GCPW Read More »

Google Workspace expands password reset alerts to all admins

cybersecurity, Google, Google Workspace, News, password management /

Google Workspace expands password reset alerts to all admins 2026-06-24 at 12:07 By Anamarija Pogorelec Google’s Alert Center, a dashboard in the Google Admin console that displays security and administrative alerts and helps administrators identify, investigate, and respond to issues affecting their organization, is expanding the “Super Admin password reset” alert into the “Admin password […]

Google Workspace expands password reset alerts to all admins Read More »

OAuth marketplace apps keep access after publishers vanish

auditing, cyber risk, cybersecurity, Don't miss, GitHub, Google Workspace, News, OAuth, report, research, Risk Management /

OAuth marketplace apps keep access after publishers vanish 2026-06-04 at 16:06 By Mirko Zorz Installing an app from the Google Workspace Marketplace or GitHub Marketplace can grant a third party access to company email, files, calendars, code repositories, CI workflows, organization settings, and secrets. Marketplace presence gives these apps the appearance of approval. The OAuth […]

OAuth marketplace apps keep access after publishers vanish Read More »

Google lets Workspace admins apply one policy across all SAML apps

Google, Google Workspace, News, SSO, update /

Google lets Workspace admins apply one policy across all SAML apps 2026-05-15 at 16:07 By Sinisa Markovic Google has updated Context-Aware Access (CAA) in Google Workspace to introduce a default policy assignment for SAML applications. SAML applications are third-party or internal applications that use the Security Assertion Markup Language (SAML) protocol to enable single sign-on […]

Google lets Workspace admins apply one policy across all SAML apps Read More »

Google’s Workspace Intelligence promises privacy while running on your data

AI, cybersecurity, Google, Google Workspace, News, Privacy /

Google’s Workspace Intelligence promises privacy while running on your data 2026-04-22 at 23:27 By Sinisa Markovic Security and data governance are among the key considerations in Google’s latest AI update, which introduces Workspace Intelligence within Google Workspace. Google describes the feature as “a secure, dynamic system that inherently understands complex semantic relationships within your Workspace […]

Google’s Workspace Intelligence promises privacy while running on your data Read More »

Google Drive now detects ransomware and helps restore affected files

Google, Google Drive, Google Workspace, News, Ransomware /

Google Drive now detects ransomware and helps restore affected files 2026-03-31 at 12:46 By Anamarija Pogorelec To help organizations minimize the impact of malware attacks on personal computers, Google launched ransomware detection and file restoration in beta in September 2025. These features are now generally available. End user alert in Drive for desktop when ransomware […]

Google Drive now detects ransomware and helps restore affected files Read More »

Google is making sending end-to-end encrypted emails easy

Don't miss, email security, Encryption, enterprise, Gmail, Google Workspace, Hot stuff, News, Outlook, Privacy, secure communications, SMBs /

Google is making sending end-to-end encrypted emails easy 2025-04-02 at 15:03 By Zeljka Zorz Sending end-to-end encrypted (E2EE) emails from Gmail enterprise accounts is about to become much easier than it is now, Google has announced on Tuesday. The company will first make available this simplified capability to users who want to send E2EE emails […]

Google is making sending end-to-end encrypted emails easy Read More »

Design flaw leaves Google Workspace vulnerable for takeover

Google, Google Workspace, Hunters, News, vulnerability /

Design flaw leaves Google Workspace vulnerable for takeover 28/11/2023 at 18:31 By Help Net Security A design flaw in Google Workspace’s domain-wide delegation feature, discovered by Hunters’ Team Axon, can allow attackers to misuse existing delegations, enabling privilege escalation and unauthorized access to Workspace APIs without Super Admin privileges. Such exploitation could result in the […]

Design flaw leaves Google Workspace vulnerable for takeover Read More »

Google Workspace: New account security, DLP capabilities announced

access control, data loss prevention, Don't miss, enterprise, Google Workspace, Hot stuff, News, security controls, SMBs /

Google Workspace: New account security, DLP capabilities announced 25/08/2023 at 07:47 By Zeljka Zorz New capabilities in Google Workspace will help enterprises improve account and data security, by making unauthorized takeover of admin and user accounts and exfiltration of sensitive data more difficult. Some of these options are already available in preview and others will […]

Google Workspace: New account security, DLP capabilities announced Read More »

Threat actors can exfiltrate data from Google Drive without leaving a trace

digital forensics, Don't miss, enterprise, Google, Google Drive, Google Workspace, Hot stuff, Incident Response, Mitiga, News, SMBs, threat hunting /

Threat actors can exfiltrate data from Google Drive without leaving a trace 01/06/2023 at 15:43 By Zeljka Zorz Google Workspace (formerly G Suite) has a weak spot that can prevent the discovery of data exfiltration from Google Drive by a malicious outsider or insider, Mitiga researchers say. A problem for digital forensic analysts and incident […]

Threat actors can exfiltrate data from Google Drive without leaving a trace Read More »

Scroll to Top