StrongestLayer: Top ‘Trusted’ Platforms Are Key Attack Surfaces

Why It Matters

As organizations increasingly rely on trusted SaaS platforms, attackers leveraging those services create blind spots that conventional email security tools cannot see, raising the risk of credential theft and data breaches. Understanding this emerging trust‑exploitation vector is crucial for security teams to adapt their defenses before AI‑driven attacks dominate the threat landscape.

Summary

In this episode Adrian Bridgwater discusses StrongestLayer’s new threat‑intelligence report, which analyzed 2,042 advanced email attacks that slipped past Microsoft Defender E3/E5 and leading secure email gateways. The findings reveal a shift toward attackers exploiting trusted platforms such as DocuSign, Microsoft, and Google Calendar, with 77% of attacks failing SPF/DKIM/DMARC yet still reaching inboxes, and 45% showing AI‑assisted characteristics. CEO Alan LeFort explains that traditional pattern‑based detection is losing effectiveness against AI‑generated phishing, coining the “Pattern‑Matching Cliff,” and calls for a dual‑evidence approach that validates both threat signals and business legitimacy.