Unsupervised Learning15 Apr 2025

A Conversation with Patrick Duffy from Material Security

➡ Secure what your business is made of with Martial Security:
https://material.security/

In this episode, I speak with Patrick Duffy from Material Security about modern approaches to email and cloud workspace security—especially how to prevent and contain attacks across platforms like Google Workspace and Microsoft 365.

We talk about:

• Proactive Security for Email and Cloud Platforms
How Material goes beyond traditional detection by locking down high-risk documents and inboxes preemptively—using signals like time, access patterns, content sensitivity, and anomalous user behavior.

• Real-World Threats and Lateral Movement
What the team is seeing in the wild—from phishing and brute-force attacks to internal data oversharing—and how attackers are increasingly moving laterally through cloud ecosystems using a single set of compromised credentials.

• Customizable, Context-Aware Response Workflows
How Material helps teams right-size their responses based on risk appetite, enabling fine-grained actions like MFA prompts, access revocation, or full session shutdowns—triggered by dynamic, multi-signal rule sets.

Subscribe to the newsletter at:
https://danielmiessler.com/subscribe

Join the UL community at:
https://danielmiessler.com/upgrade

Follow on X:
https://x.com/danielmiessler

Follow on LinkedIn:
https://www.linkedin.com/in/danielmiessler

Chapters:

00:00 - Welcome & High-Level Overview of Material Security
02:04 - Common Threats: Phishing and Lateral Movement in Cloud Office
05:30 - Access Control in Collaborative Workspaces (2FA, Just-in-Time, Aging Content)
08:43 - Connecting Signals: From Login to Exfiltration via Rule Automation
12:25 - Real-World Scenario: Suspicious Login and Automated Response
15:08 - Rules, Templates, and Customer Customization at Onboarding
18:46 - Accidental Risk: Sensitive Document Sharing and Exposure
21:04 - Security Misconfigurations and Internal Abuse Cases
23:43 - Full Control Points: IP, Behavior, Classification, Sharing Patterns
27:50 - Integrations, Notifications, and Real-Time Security Team Coordination
31:13 - Lateral Movement: How Attacks Spread Across the Workspace
34:25 - Use Cases Involving Google Gemini and AI Exposure Risks
36:36 - Upcoming Features: Deeper Remediation and Contextual Integration
39:30 - Closing Thoughts and Where to Learn More

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Det här avsnittet är hämtat från ett öppet RSS-flöde och publiceras inte av Podme. Det kan innehålla reklam.

Avsnitt(548)

Evolution, Lit RPG and AI Harnesses

I went on a walk and ended up connecting three things I've been thinking about: evolution, LitRPG, and personal AI harnesses. Why listening to The Primal Hunter keeps getting me excited to work on my ...

17 Sep 23min

The Missing Piece Is Ideal State

📝 Theo put out a video saying you should turn off Claude Code's memory, and it triggered me enough to record a response. My argument: the real problem with all AI is the gap between what's in your he...

31 Aug 20min

The Different Games OpenAI and Anthropic Are Playing

Anthropic is going after the enterprise operations layer; OpenAI wants to be everyone's personal agent. Both are multi-trillion-dollar markets, and they barely overlap.Become a Member: https://danielm...

14 Aug 3min

Debating the Morality of Dario Amodei

A debate with Zack Korman on the morality of Dario Amodei specifically, and Anthropic in general. Zack's version of the video: https://youtu.be/mQ9-YoE9ykEBecome a Member: https://danielmiessler.com/u...

9 Juli 1h 14min

Rethinking AI Harnesses

Why we should think of the AI harness not as a coding tool, but as an Intent Engineering system that manages your entire life — a LifeOS. https://github.com/danielmiessler/LifeOSBecome a Member: https...

9 Juli 12min

Why We Need Some AI Model Controls

My argument for why we need some AI model controls.Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

9 Juli 36min

AI Predicts the Text of Answers

A logical argument and demonstration of how AI has one type of understanding while lacking another. https://aiunderstands.ai Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/liste...

3 Juni 8min

Most Companies Aren't Anywhere Near Ready for AI

Most Companies Aren't Anywhere Near Ready for AI. It's not that companies aren't using AI—it's that they can't.Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privac...

3 Maj 5min