Security · 5 November 2026
Material Security reveals Google Calendar phishing campaign hijacking sessions, bypassing MFA
Since mid‑August 2026 a phishing operation harvested live Google sessions from corporate users via Calendar invites that used trusted redirects and fake login pages; Material Security took down hundreds of domains, nearly 900, in Operation CloudFire.
Why it matters
Track the rise of calendar‑invite phishing that bypasses MFA; prioritize detection of trusted‑redirect patterns in your security roadmap.
For product managers
For your product
What does this mean for your product?
Try it on your product More from this issueAll AI news from 5 Nov →
Get this every morning, written for your product.
Deltaday reads the whole AI news cycle and tells you what changed, whether it's real yet, and what to do about it.