
- Calendar subscriptions can be hijacked, injecting phishing links or malware into user schedules
- Bitsight found 347 domains affecting around 4 million devices, mostly in the United States
- Not a bug, but risky functionality; users must manage subscriptions carefully
A convenient feature in popular calendar applications can be abused to trick people into clicking on malicious links or giving away sensitive information, researchers are saying.