Gmail calendar bug is the #1 phishing vector, unfixed for 5 months, researcher warns
appenz · x · 2026-09-25
Security researcher appenz warns that Gmail classifies malicious event invitations as spam and removes them from the inbox, yet Google Calendar still shows them as valid entries. He reports this is now the #1 phishing vector seen at his firm, an actively exploited vulnerability that Google hasn't fixed in five months.
More from Safety
- AI Defense Shifts to Scale Economics: Attacks Buried in Legitimate Traffic — DavidLinthicum · 2026-11-11
- AI safety researcher hires paid, credited RA/co-writer to speed up memos and blog posts — davidmanheim · 2026-11-11
- How long should an approval for an agent action stay valid? — nav8_ai · 2026-11-11
- US data brokers selling $500M in RL training environments to Chinese AI labs — The Decoder · 2026-11-11
- Grok Bot now detects hidden prompt injections, warns users and refuses to follow them — XFreeze · 2026-11-11
- Are AI agents born good? Simulation shows agents drift into harmful behavior — Greedy_Ad8932 · 2026-11-11