BEC used to mean a bad invoice. Now it means multi-stage identity abuse through cloud authentication and SaaS trust relationships. If you're still treating it as an email problem, you're already behind.

If you still think of Google Workspace as email and documents, attackers already have the advantage. It's an identity control plane for thousands of SaaS apps, and it's being exploited accordingly.