Security firm Sublime has reported a surge in phishing attacks delivered via calendar invitations (ICS files) rather than traditional email, warning that such invites can bypass spam filters even when the accompanying email is blocked. The scams typically mimic legitimate meeting invites or payment notices, directing victims to fake login pages or malware disguised as Microsoft, Google, or PayPal services. Sublime says ICS phishing incidents rose roughly 33,000% between May and September, with attacks doubling or tripling month over month.
techspot.com
· 2026-10-17
In the latest Apple @ Work episode, host discusses tailored phishing simulations with Samantha Schwartz and Jack Hirsch of Sublime Security. The conversation focuses on how simulated phishing tests are evolving to reflect increasingly sophisticated, AI-generated attack techniques. The episode is sponsored by Mosyle, which markets itself as a unified Apple device management platform used by over 45,000 organizations.
9to5mac.com
· 2026-09-22
Security firm Sublime found that malicious calendar invites sent via email, known as ICS phishing, have surged dramatically, rising 282% in June, 338% in July, and 1,216% in August, with a projected 2,852% jump in September. These fake invites exploit a default feature in Outlook, Gmail, and Apple Mail that auto-adds ICS files to a user's calendar before they accept or decline them.
zdnet.com
· 2026-09-18