Skip to main content

May 1, 2026

GWS Calendar Invite Remediation & Threat Log Calendar Invite Filter

​​Calendar invites have become a persistent phishing vector. Abnormal has extended Calendar Invite Remediation to Google Workspace, automatically removing malicious calendar invites from users' calendars when linked emails are remediated.

​​Calendar invites have become a persistent phishing vector. Abnormal has extended Calendar Invite Remediation to Google Workspace, automatically removing malicious calendar invites from users' calendars when linked emails are remediated.

With this release:

  • Automatic removal of malicious calendar invites from GWS users' calendars when linked emails are remediated as Attack, Borderline, or Spam

  • Calendar event restoration when a remediated email is later marked Safe

  • New Calendar Invite filter added to the Threat Log, available across all surfaces: Portal, CSV export, SIEM, and the REST API — flags calendar invite messages regardless of whether Calendar Invite Remediation is enabled. Applies to both GWS and M365 customers.

MKT1531 Product Image for the launch of GWS Calendar Invite Remediation Threat Log Calendar Invite

Protect Against Evolving Email Threats

See how behavioral AI detects attacks that legacy defenses miss.