\u2018You Have a Meeting\u2019: The Calendar Phishing Scam Growing Exponentially<\/h2>\n\n\n\n
Welcome to the 143rd edition of HX Weekly<\/strong>. Let\u2019s get back to basics and talk about phishing. It is the quintessential cyber threat that everyone should be intimately familiar with by now. It\u2019s everywhere, and when coupled with sophisticated social engineering, it can be shockingly convincing.<\/p>\n\n\n\n
Take the latest vector sweeping inboxes: calendar invitations. A simple notification reading “You have a meeting”<\/em> drops into your calendar, luring you in with familiarity before landing a malicious payload.<\/p>\n\n\n\n
What now?<\/strong> Stay vigilant and think twice before clicking anything unexpected.<\/p>\n\n\n\n
Tools:<\/strong> Always practice reverse verification<\/strong>. Even if a message appears to come from someone you know well, if you weren\u2019t expecting it, take a moment to verify with the sender through an alternate channel before interacting.<\/p>\n\n\n\n
The Threat Horizon: Calendar Lures, Self-Replicating Models, and Zero-Clicks<\/h3>\n\n\n\n
This week’s security highlights demonstrate why ignoring basic cyber hygiene carries a staggering price:<\/p>\n\n\n\n
\n
Self-Replicating AI Warnings:<\/strong>\u00a0Anthropic has issued a stark warning that small AI models could soon begin self-replicating on IoT devices, pushing autonomous risk into everyday hardware.<\/li>\n\n\n\n
Zero-Click Ad Spyware:<\/strong>\u00a0Citizen Lab traced sophisticated, zero-click\u00a0Candiru<\/em>\u00a0spyware infections targeting Al Jazeera journalists directly through online ads, while researchers warn that zero-click spyware is increasingly infecting devices via standard web advertisements.<\/li>\n\n\n\n
Malvertising & Search Hijacks:<\/strong>\u00a0Hackers are actively abusing Google Ads and Bing search redirects to push deceptive\u00a0Claude ClickFix<\/em>\u00a0attacks.<\/li>\n\n\n\n
Massive Breaches & Patch Crises:<\/strong>\u00a0A staggering data breach in Denmark exposed 8.8 million people\u2014linked directly to the timelessly terrible password\u00a0\"123456\"<\/code>. Meanwhile, Microsoft dropped an actively exploited zero-day amid a record-breaking patch batch of\u00a01,413 vulnerabilities<\/strong>, prompting a startling statistic: one-fifth of CISOs are taking time off on Patch Tuesday just to escape the overwhelm.<\/li>\n\n\n\n
Enterprise Scrambles & Fed Raids:<\/strong>\u00a0Bank of America reportedly had to bring in 1,000 external contractors just to patch all the bugs identified by\u00a0Mythos<\/em>. On the law enforcement front, the FBI raided North Korean (DPRK) IT worker laptop farms in Texas, arresting several US nationals, while West Asian scam compounds were raided, rescuing over 100 suspected trafficking victims.<\/li>\n\n\n\n
FTC Crackdowns:<\/strong>\u00a0The FTC revealed that commercial “sextortion” protection companies have been actively deceiving customers about the true nature of their services.<\/li>\n<\/ul>\n\n\n\n
What Now? Back to the Fundamentals<\/h3>\n\n\n\n
The cybersecurity fundamentals are like that one friend who never leaves the party\u2014always reliable, always important. This week\u2019s massive breaches and phishing campaigns were brought to you by folks who chose to ghost the basics (such as using \"123456\"<\/code> as a password\u2014because who needs security when you have convenience, right?).<\/p>\n\n\n\n\n
Embrace Zero Trust:<\/strong>\u00a0Watch our featured PSA this week,\u00a0“How to practice zero trust?”<\/strong>\u00a0(inspired by\u00a0Broadchurch<\/em>), to learn how to verify every single digital interaction.<\/li>\n\n\n\n
Protect Your Hardware:<\/strong>\u00a0Android is rolling out new AI-driven defenses against messaging scams and fake calls, but your best defense remains healthy skepticism.<\/li>\n\n\n\n
Ground Your Mind:<\/strong>\u00a0Amidst the digital chaos, remember to center yourself. Watch our wide-format\u00a0More You<\/strong>\u00a0digital detox PSA,\u00a0“Centering: Reset Your Mind and Guard Your Security”<\/strong>\u00a0(inspired by\u00a0Of Mice and Men<\/em>), to clear your head.<\/li>\n<\/ol>\n\n\n\n
Inside Hexagon: HX Reports and the 31st T3 Edition<\/h3>\n\n\n\n
Even though we still face operational limitations, rest assured our team is doing everything possible to keep the work moving forward. We are thrilled to announce a brand-new campaign from our team at HexagonPSA: HX Reports<\/strong>, launching soon at a platform near you!<\/p>\n\n\n\n
Also, make sure to check out the latest T3 (31st Edition): What is a zero-day vulnerability?<\/strong> (inspired by 21 Jump Street<\/em>).<\/p>\n\n\n\n
![\"\"](\"https:\/\/hexagoncenter.org\/spotlight\/wp-content\/uploads\/2026\/10\/Gemini_Generated_Image_w7f8xjw7f8xjw7f8.jpg\")
<\/figure>\n\n\n\n