The Evolution of Email Security: From Pre-Breach to Post-Breach Protection

18 snips

Sep 16, 2025

In this conversation, Rajan Kapoor, Field CISO at Material Security and former Director of Security at Dropbox, dives into the outdated pre-breach mindset of email security. He emphasizes the critical need for post-breach protection to safeguard sensitive data inside mailboxes. Rajan discusses the interconnectedness of productivity suites like Google Workspace and Microsoft 365, which have transformed the inbox into a security risk. He also addresses the emerging threats posed by AI co-pilots that could expose over-shared information, urging for a shift to comprehensive workspace security.

Ask episode

AI Snips

Chapters

Transcript

Episode notes

INSIGHT

Protect Mailbox Data At Rest

Email security must evolve from only blocking inbound threats to protecting mailbox data at rest.
Post-breach protection of mailbox content is now as important as pre-breach defenses.

INSIGHT

Unify Workspace Security Tools

Workspace security must collapse multiple app detections into a unified platform.
Treat email as one part of a broader workspace security posture, like EDR did for endpoints.

ADVICE

Gain Visibility Then Classify

First get visibility into mailbox content, then classify what you find.
After classification, track sharing and access patterns to detect misuse or exfiltration.

Get the Snipd Podcast app to discover more snips from this episode

Get the app