Google Workspace is a technology platform tracked across 48 threat clusters and 80 intelligence report mentions on ThreatCluster. First observed October 30, 2025; most recent activity July 17, 2026.
Google Workspace is Google's cloud-based productivity and collaboration platform (email, docs, drive, calendar, and apps) used by enterprises to coordinate work. It is central to many organizations' workflows and, given its broad adoption and integrations, is a prominent target for evolving cyber threats, including AI-enabled abuse, phishing, and data-exposure vulnerabilities within the Google ecosystem.
Recent research from Darktrace reveals the evolution of Chinese-nexus cyber operations over the past two decades, highlighting a shift from high-volume attacks to more strategic, identity-centric intrusions. This change…
Two threat groups, Cordial Spider and Snarky Spider, affiliated with The Com, are targeting U.S. organizations across various critical infrastructure sectors for rapid data theft and extortion. Their operations,…
In March 2026, the EvilTokens phishing kit emerged as a significant threat, allowing cybercriminals to bypass multi-factor authentication (MFA) and compromise Microsoft 365 accounts. This Phishing-as-a-Service (PhaaS)…
Zscaler has integrated its Zero Trust platform with Vectra AI to enhance threat detection and response capabilities against sophisticated cyber attacks. The integration focuses on identifying malicious…
Between August 9 and August 17, 2025, the threat actor UNC6395 exploited stolen OAuth tokens from Salesloft's Drift integration to access Salesforce environments of over 700 organizations, including major tech firms.…
A significant supply chain attack was uncovered involving the acquisition of the Essential Plugin company, which led to backdoors being inserted into at least 30 WordPress plugins. The malicious code remained dormant…
The emergence of Frontier AI technologies has significantly transformed the landscape of email security. Anthropic's Claude Mythos Preview can now generate convincing phishing lures at unprecedented speeds, allowing…
In 2026, attackers are leveraging AI to rapidly develop and evolve phishing kits, significantly outpacing traditional detection methods that rely on blocklists and IoCs. Employees are increasingly adopting unvetted AI…
Telus Digital, a Canadian telecommunications and BPO provider, has confirmed a significant data breach involving the ShinyHunters hacking group. The attackers claim to have stolen approximately 1 petabyte of data,…
Lovable, a vibe-coding platform, is under scrutiny after a researcher revealed a significant data exposure issue affecting all projects created before November 2025. The researcher, known as @weezerOSINT, demonstrated…