Attackers could abuse Google's SSO integration with Windows for lateral movement
Compromised Windows systems can enable attackers to gain access to Google Workspace and Google Cloud by stealing access tokens and plaintext passwords.
Source: csoonline.com