Tag: calendar subscriptions

1 Attack Reports | 0 Vulnerabilities

Attack reports

The Hidden Dangers of Calendar Subscriptions: 4 Million Devices at Risk

Bitsight researchers uncovered a significant security risk associated with calendar subscriptions, potentially affecting 4 million devices. Expired or hijacked domains hosting calendar subscriptions can be exploited for large-scale social engineering attacks. The research revealed two types of sync…
ios
social engineering
macos
cybersecurity
CVE-2025-27915
push notifications
2025-11-26
balada injector
calendar subscriptions
expired domains
Published: November 26, 2025
Linked vulnerabilities : CVE-2025-27915 (CVSS 5.4)
Downloadable IOCs: 22
Click here to see more Attack Reports