Guido Appenzeller
@appenz
Replying to @gmail
@gmail This bug in GMail is now the #1 phishing vector we are seeing at our firm. The invitations are classified as spam or malicious, but GMail adds the event as a valid calendar entry.
This is an actively exploited vulnerability which you haven't fixed for 5 months.
This is an actively exploited vulnerability which you haven't fixed for 5 months.
Guido Appenzeller@appenz · Mar 27Google Calendar sometimes blows my mind. If an invitation to an event is classified as Spam:
1. It is removed from Inbox and filed as Spam ✅
2. The calendar shows it as a valid invitation 🥶
Why?
Open quoted post →1. It is removed from Inbox and filed as Spam ✅
2. The calendar shows it as a valid invitation 🥶
Why?
1 5