Over 390 Abandoned iCalendar Sync Domains Risk ~4 Million Devices

First seen 27 Nov 2025, 20:34 UTC • Cyberpress

•24

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Over 390 abandoned iCalendar sync domains have been identified, potentially exposing nearly 4 million devices to security risks. These domains may facilitate phishing and other malicious activities through Base64-encoded URIs. The situation highlights vulnerabilities that could be exploited by attackers.

How this analysis works

Continue Reading

Critical Appsmith Vulnerability Enables Account Takeovers Critical Exploitation of Cisco CM and Samsung KNOX Vulnerabilities Active Exploitation of GitLab CVE-2026-19478 and Microsoft Entra ID Flaw Google Chrome Zero-Day Vulnerability CVE-2025-13223 Exploited in the Wild Lazarus Group Exploits Windows Zero-Day to Target Defense Sector Russian Hackers Exploit Zimbra Zero-Day for Espionage Campaign

Over 390 Abandoned iCalendar Sync Domains Risk ~4 Million Devices

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading