The Access You Forgot You Granted: Material’s OAuth Risk Report
featured Post

The Access You Forgot You Granted: Material’s OAuth Risk Report

Summary: We analyzed 22,000+ OAuth apps in the wild and found AI adoption bypassing security and IT, thousands of zombie tokens still active, and lots of restricted scopes.

Material Research Team
10m listen
10m read
10m watch
10m watch
Listen episode
Read post
Watch webinar
Watch video

All Posts

This is some text inside of a div block.
Type
Category
Clear all
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Lessons from the Hugging Face Incident: Stop Trying to Never Get Breached
Blog Post

Lessons from the Hugging Face Incident: Stop Trying to Never Get Breached

What the Hugging Face incident reveals about the only security strategy that still makes sense in the age of AI agents.

Material Research Team
Belem Regalado
5
m watch
m watch
m listen
m read
m read
Watch video
Watch webinar
Read post
Download file
Listen to episode
Industry Insights
Apple's Offboarding Mistake Opens a Bigger Conversation
Blog Post

Apple's Offboarding Mistake Opens a Bigger Conversation

Unrevoked OAuth tokens and stale permissions create a significant security risk, allowing access to internal systems to silently outlive an employee’s tenure long after they depart.

Material Research Team
Belem Regalado
12
m watch
m watch
m listen
m read
m read
Watch video
Watch webinar
Read post
Download file
Listen to episode
Industry Insights
The Inbox is a Master Key. Material Secures It Like One
Blog Post

The Inbox is a Master Key. Material Secures It Like One

Material Security protects the identity layer inside your email by applying conditional access to sensitive credentials like magic links and password resets, preventing attackers from using the mailbox as a master key to downstream applications.

Material Security Team
7
m watch
m watch
m listen
m read
m read
Watch video
Watch webinar
Read post
Download file
Listen to episode
Product
Defusing Email Bomb Attacks with Material Security Thumbnail
Blog Post

What Is an Email Bomb? How Inbox Flooding Attacks Work and How to Stop Them

Material delivers a new solution to a resurgent threat: automated remediations to email flooding attacks.

Nate Abbott
Caroline Pierce
Mike Moran, Ph.D.
5
m watch
m watch
m listen
m read
m read
Watch video
Watch webinar
Read post
Download file
Listen to episode
Product
Consent Is the New Vulnerability
Blog Post

Consent Is the New Vulnerability

OAuth consent has emerged as a critical security vulnerability that bypasses traditional authentication like MFA and passwords, granting attackers persistent, automated access that survives even password resets and account offboarding.

Kate Hutchinson
5
m watch
m watch
m listen
m read
m read
Watch video
Watch webinar
Read post
Download file
Listen to episode
Industry Insights
See It, Close It: Agent Enhancements, New Detections, OAuth Risk Report, and More
Blog Post

See It, Close It: Agent Enhancements, New Detections, OAuth Risk Report, and More

Material’s June included new detections, workflow improvements, updates to the OAuth Threat Remediation Agent, and the industry’s first real-world OAuth Risk Report.

James Juran
5
m watch
m watch
m listen
m read
m read
Watch video
Watch webinar
Read post
Download file
Listen to episode
Product
What the Updated HIPAA Security Rule Means for Email Risk Assessments
Blog Post

What the Updated HIPAA Security Rule Means for Email Risk Assessments

A guide for auditors, HITRUST assessors, and HIPAA compliance consultants.

Material Team
10
m watch
m watch
m listen
m read
m read
Watch video
Watch webinar
Read post
Download file
Listen to episode
Industry Insights
The Access You Forgot You Granted: Material’s OAuth Risk Report
Blog Post

The Access You Forgot You Granted: Material’s OAuth Risk Report

Summary: We analyzed 22,000+ OAuth apps in the wild and found AI adoption bypassing security and IT, thousands of zombie tokens still active, and lots of restricted scopes.

Material Research Team
10
m watch
m watch
m listen
m read
m read
Watch video
Watch webinar
Read post
Download file
Listen to episode
Industry Insights
The Composio Breach: One token, 10,242 doors
Blog Post

The Composio Breach: One token, 10,242 doors

One compromised Gmail token gave attackers a skeleton key to 10,000+ customer credentials — and it's the same OAuth playbook security teams keep underestimating.

Rajan Kapoor
7
m watch
m watch
m listen
m read
m read
Watch video
Watch webinar
Read post
Download file
Listen to episode
Industry Insights
No results found.
Please try different keywords.
Risky Biz Podcast Interview with Rajan & Dan Image
podcast

Risky Biz Podcast Interview with Rajan & Dan

Dan Ayala, Chief Security & Trust Officer from Dotmatics joins Rajan Kapoor, Field CISO from Material on Risky Business to discuss how to wrangle securing data that ends up in corporate cloud email and file stores.

Rajan Kapoor
Material Team
10m listen
10m read
Listen episode
Listen now

Webinars

See more
No items found.

Whitepapers & Research

Dive into our extensive library of whitepapers to gain in-depth insights and comprehensive analysis on the latest trends and technologies. Explore expert research and stay informed with valuable knowledge to drive your projects forward.

download

Material Guide to Google Workspace Security

Secure the business without slowing it down. This guide shows first/only security and IT hires exactly how to harden Google Workspace quickly, decide where native controls are enough, and where to augment—so you can ship security wins now. Fill out the form to the right to download now!

Material Security Team
m read
Get your copy
download

Material: Security and Architecture Overview

Explore Material Security's architecture, designed for robust protection of email and cloud data through a zero-trust approach.

m read
Get your copy

Video Library

Explore our diverse collection of videos, featuring expert insights, tutorials, and industry updates. Dive into detailed analyses and practical demonstrations that bring the latest tech trends to life. Stay informed and inspired with our engaging video content.

See more
Material Product Demo: Securing Google Workspace & M365 Image
play button
FEATURED VIDEO

Material Product Demo: Securing Google Workspace & M365

Abhishek Agrawal gives an in-depth product demo walkthrough on Risky Business

Abhishek Agrawal
35m watch
TLDR Sec Demo Video Deep Dive with Clint Gibler
play button
video

TLDR Sec Demo Video Deep Dive with Clint Gibler

Watch a deep dive Material demo with Clint Gibler from TLDR Sec.

45
m watch
Demo Video: Automated File Detection & Response for Google Drive thumbnail
play button
video

Demo Video: Automated File Detection & Response for Google Drive

Take a deeper look at Material's automated detection and response features for Google Drive.

Nate Abbott
2
m watch
Fed Gov Today Interview: Adopting the Zero Trust Mindset Thumbnail
play button
video

Fed Gov Today Interview: Adopting the Zero Trust Mindset

Abhishek joined the Fed Gov Today show with Francis Rose to explore how Federal agencies are utilizing a zero trust approach to build a resilience framework.

Material Team
5
m watch
Privacy Preference Center

By clicking “Accept”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. View our Privacy Policy for more information.

Allow all
Decline all
New