Latacora, corpsec perspective: audit Google Groups and OAuth'd apps, run a phishing red-team exercise. Finding appsec bugs matters but maybe not so much if eve

Latacora, corpsec perspective: audit Google Groups and OAuth'd apps, run a phishing red-team exercise. Finding appsec bugs matters but maybe not so much if everyone just signs over whatever privilege apps ask for and it'll exfil whatever's on Drive.