CALENDAR INVITE PHISHING CAN LEAVE MALICIOUS EVENTS ON YOUR CALENDAR

Summary from the TLDR InfoSec newsletter

Phishing links, QR codes, and fake payment notices delivered via malicious .ics invites can remain on a victim's calendar even after email security tools quarantine the original message, because many filters fail to remove the events those emails auto-created. Sublime Security documented this gap in Google Workspace and Microsoft 365 and projected a roughly 33,000% increase in calendar-based attacks from May to September. Check Point separately flagged more than 302,000 unique phishing emails across 40,000+ organizations in a calendar-themed Microsoft 365 campaign.