NewsBleepingComputer
Google Calendar phishing campaign hijacks sessions, bypasses MFA
More on Calendar
Other advisories
- Not ratedosv:CLEANSTART-2024-UV46944Agents are able to list appointments in the calendars without required permissions
- MediumCVE-2026-103915Melograno Booking for Appointments and Events Calendar: Offenlegung vertraulicher Informationen
- MediumCVE-2026-103915Melograno Booking for Appointments and Events Calendar: Offenlegung vertraulicher Informationen
- MediumCVE-2026-119176CodePeople CP Multi View Events Calendar: Cross-Site-Scripting (XSS)
- MediumCVE-2026-119367Liquid Web / StellarWP The Events Calendar: fehlende Autorisierung
- MediumCVE-2026-119176CodePeople CP Multi View Events Calendar: Cross-Site-Scripting (XSS)
- MediumCVE-2026-119714Joseph C Dolson My Calendar - Accessible Event Manager: Code-Injection
- MediumCVE-2026-119369Liquid Web / StellarWP The Events Calendar: Cross-Site-Scripting (XSS)
Other news entries
- From One Account to Every Mailbox: Breaking Zimbra's Identity Boundaries (Part 1)NewsRapid7
- MacSync malware uses public iCloud calendars to deliver new payloadsNewsBleepingComputer
- Microsoft to retire Microsoft 365 Companion apps in DecemberNewsBleepingComputer
- Unauthenticated RCE Flaws Could Expose 200,000+ WordPress Sites to TakeoverNewsSecurityWeek
- 14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2NewsThe Hacker News
- 5 key priorities for your Black Hat agenda — and what to avoidNewsCSO Online
- New HollowGraph Malware Abuses Microsoft 365 Calendar for C&C CommunicationNewsSecurityWeek
- New HollowGraph malware uses Microsoft Graph for stealthy C2 commsNewsBleepingComputer
ID