![\"Google](\"https:\/\/www.newsbeep.com\/ca\/wp-content\/uploads\/2025\/11\/1762185428_97_960x0.jpg\")
<\/p>\n<\/p>\n
Beware malicious Google and Microsoft calendar invites.<\/p>\n
SOPA Images\/LightRocket via Getty Images<\/p>\n
Not all cybersecurity attacks involve unsupported operating systems<\/a>, vulnerabilities without a patch<\/a>, or password-stealing malware<\/a>. Many, it has to be said, come under the remit of social engineering, exploiting human weaknesses alongside a little technical threat tomfoolery<\/a>. The latest such warning has come from Sublime Security after it \u201cobserved a significant influx in phishing attacks\u201d against users of Google Workspace and Microsoft 365 calendars. Here\u2019s what you need to know and do.<\/p>\n ForbesMicrosoft Sounds Windows 11 And Server Update Failure AlarmBy Davey Winder<\/a>A Surge Of Malicious Google And Microsoft Calendar Invites <\/p>\n It has been almost a year since I last reported<\/a> about the threat surface that is, erm, your calendar. Yet that threat has not gone away, and Google and Microsoft users are now being warned of a surge in attacks that use calendar invites as a method to evade security solutions and deliver their undoubtedly dangerous payloads. A newly published report<\/a> by Ahry Jeon, a product manager, and Brandon Murphy, a threat detection engineer, both working at Sublime Security, warns that \u201cdepending on the settings of the target\u2019s calendar, even if the email message is automatically quarantined by an email security solution, the calendar entry often remains on the target\u2019s calendar.\u201d<\/p>\n An .ics file is a calendar data format used to enable the sharing of events between calendar applications from the likes of Apple, Google, and Microsoft. It is a hugely popular format, not least thanks to the ability to automatically add invites to calendars from Google Workspace and Microsoft 365. In the latter, the security boffins warn, \u201cit will also bring attachments from the email into the invitation.\u201d Obviously, this provides an attacker with a double-whammy threat of the email and the invite to deliver a payload. Double-whammy threat, double the chance of success.<\/p>\n