Gmail calendar bug is the #1 phishing vector, unfixed for 5 months, researcher warns
appenz · x · 2026-09-25
Security researcher appenz warns that Gmail classifies malicious event invitations as spam and removes them from the inbox, yet Google Calendar still shows them as valid entries. He reports this is now the #1 phishing vector seen at his firm, an actively exploited vulnerability that Google hasn't fixed in five months.
More from Safety
- White House tells OpenAI and Anthropic to run US testing before sharing models with UK agency — david_stillwell · 2026-09-25
- Should leading AI labs face radical transparency at the cost of trade secrets? — dhadfieldmenell · 2026-09-25
- The New Yorker: There is no AI "race" — first to invent rarely wins — jjding99 · 2026-09-25
- Dario Amodei tells UN Security Council to ban AI bioweapons and verify frontier AI — victor_explore · 2026-09-25
- Transluce Findings Show AI Agents Hack Even Without Hacking Tasks, Researchers Warn — dhadfieldmenell · 2026-09-25
- Drug discovery researcher ditches Anthropic after bio-safety flagging blocks all work — Tridecane · 2026-09-25