Who's trusting Material these days? Lumbra, which is putting email, Drive files, and account takeover protection under one roof across Google Workspace. Zach Morris there calls the new Material UI “amazing” and “a great force multiplier.” We’re printing that on something.

If an attacker gets into one mailbox, they typically do three things: 1. Download the entire mailbox 2. Request magic sign-in links to get into Slack, Twitter, iCloud, and more 3. Harvest your contacts and phish them as you One mailbox becomes everything it can reset. 👇

Security spend at a fast-growing company either buys leverage or buys theater. Tomorrow evening in San Francisco, four people who have seen both will talk about which is which. Request a spot: luma.com/srf42ssl?utm_source…

We’re at ASCII San Antonio, Oct 21 to 22, with a simple message for MSPs and MSSPs: your clients’ Google Workspace is where the breach starts now. Wed 2:35 PM: panel on “From Shadow IT to Shadow AI: The New Security Reality.” Thu 11 AM: Rajan Kapoor keynotes on how fast-growing companies get breached through Google Workspace. Thu, all day: live OAuth attack demo at the booth, plus a Lego R2-D2 raffle. MSPs and MSSPs can register for $1 with code MATERIALSECURITY: hubs.li/Q04BrNSw0 Book time with us: hubs.li/Q04BrP2k0

Figma designs interfaces for a living, so their Head of Security has opinions about security tools. Dev Akhawe (@frgx) says it is rare to find one with a pleasant, usable UI. Figma uses Material to pull phishing out of every inbox in one click and run something close to a 24x7 SOC-less environment. 🔗 hubs.li/Q04BkSgC0

Sushi, Sake, and Security. Tuesday, Oct 20, 5 to 7 PM PT, San Francisco. Our CEO Abhishek Agrawal talks with Frank Wang of Surge AI, Daniel Macias of Cursor, and Dylan Hailey of Fleet AI about securing a company that doubles every few months without slowing it down. Unscripted. Then sushi. Request a spot: hubs.li/Q04B9_qM0

Tomorrow: our VP of Security Rajan Kapoor joins YC Cyber Night, hosted by @cotoolai, to talk building security from 0-1 and defending against AI-enabled adversaries. His take: attackers now start at OAuth, not the inbox, and AI agents can walk the same path with no attacker at all. RSVP: hubs.li/Q04B9Hyr0

Every one of the 159 organizations we studied had sensitive data being read by a connected AI agent. Rajan Kapoor lays out the three questions every security team should be able to answer, in @DarkReading! hubs.li/Q04B24lW0

You approved an OAuth app 18 months ago. Since then: new owner, new scopes. Would you know? Material re-evaluates every app’s scopes and vendor reputation every 90 days and flags changes as detections. Here’s how 👇

As the piece notes, authorization only tells you an agent can act, not whether it should. For agents employees connect themselves, the starting point is the inventory, and the OAuth consent log (app, scopes, who approved it) is where they show up. The other lever is what a connected agent can read in the mailbox. An injected instruction can only leak what the agent can see, so keeping sensitive messages unreadable without a step-up check shrinks what a manipulated agent can reach.

Tomorrow in Santa Clara. Cybersecurity Summit Silicon Valley, and a talk about the apps your team clicked “Allow” on and never looked at again. Security and IT practitioners can register free with code CSS26-Material: hubs.li/Q04zXdz-0 Book a meeting with us: hubs.li/Q04zXfFH0

Sent a test email with an EIN and a bank routing number. Material auto-secured it before it hit the inbox. Human? Click + MFA to see it. AI agent connected to the same inbox? Just sees a stub. No content, no way around it. That's the control layer agents need.

Oct 20 in SF: Abhishek Agrawal talks with Frank Wang (Surge AI), Daniel Macias (Cursor), and Dylan Hailey (Fleet AI) on where early security spend buys leverage and where it is theater. In town for Cloudflare Connect? We’re 1.5 blocks from Moscone. hubs.li/Q04zBX_D0

“Show me all open critical-severity issues from today.” “The first one looks like a false positive. Mark it as ignored.” Click-ops had a good run. Material’s API and MCP server now run detection and response from your SOAR or your agent, no UI required. hubs.li/Q04zBPsq0

Still debating if you're coming to the Cybersecurity Summit Silicon Valley on Oct 13th? Sign up for free using the Promo Code: CSS26-Material!

Trick: a calendar invite about a voicemail. Treat: the link inside is genuinely Google. The login page behind it does not exist until you arrive, and reputation feeds scored the domains clean. Material caught it anyway. 🔗 hubs.li/Q04zvxm90

Your attack surface is the sum of every 'Allow' anyone at your company ever clicked.