0
Deep & Emerging Tech·October 16, 2026·1 min read

Fake calendar invites hit thousands of businesses in Microsoft credential phishing campaign

Share

Attackers are weaponizing the most boring primitives—.ics files and calendar invites—to bypass user suspicion and MFA fatigue. Security teams should add calendar and meeting workflows to phishing simulations and tighten how clients handle .ics attachments and auto-accept rules.