Sign up to save your podcasts
Or
Share Apple Calendar Invites Are Being Turned Into Phishing Scams
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
Apple Calendar Invites Are Being Turned Into Phishing Scams
This week on The Awareness Angle, Anthony Davis and Luke Pettigrew kick off Cybersecurity Awareness Month with new short videos made in collaboration with Hoxhunt—covering spear phishing, deepfakes, and the psychology behind social engineering. Then it’s straight into the big security stories of the week: from iCloud phishing invites to Scattered Spider’s latest breach, and why even attackers are installing antivirus.
🎉 Free Hoxhunt Cybersecurity Awareness Month videos on AI phishing, deepfakes, and messaging scams. https://hoxhunt.com/cam-toolkit
📅 Apple iCloud Calendar Phishing – Scammers use Apple’s own domain to push fake calendar invites tied to PayPal scams. If it looks odd, it probably is—delete, don’t click.
✈️ Qantas Breach & Accountability – Scattered Spider strikes again, hitting 5.7M customers. Qantas cut exec bonuses by 15%—a rare move leaders elsewhere might want to note.
🎥 Nexar Dashcam Database Leak – 130TB of video, GPS, and metadata left exposed in an AWS bucket. Dashcams are becoming rolling surveillance devices—often with little oversight.
🕵️ Inside the Attacker’s Browser – Huntress stumbled onto open C2 servers, exposing adversary tools, comms, even their use of Bitdefender and Malwarebytes. A rare window into cybercrime operations.
🎮 Plex Breach & Messaging Missteps – Usernames, emails, and hashes leaked. Plex’s reset advice was buried in long paragraphs—a reminder that breach comms need to be blunt and clear.
📜 Reddit’s Wildest Breaches – Job scams running PowerShell commands, council-wide malware spreads, and SOC analysts debating true vs false positives. We unpack what awareness pros can take from the chaos.
🎭 Deepfakes vs Reality – A Trump clip went viral with viewers insisting it was AI. ITV even shared it as genuine before higher-res footage confirmed it was real. Awareness lesson: in 2025, people doubt the truth as much as they fall for fakes.
The week’s major cyber headlines, decoded into useful takeaways—and sprinkled with moments that make you raise an eyebrow.
🕒 Timestamps
00:00 — Introduction & Milestone Celebration
02:57 — Cybersecurity Awareness & Community Engagement
06:00 — Password Manager Vulnerabilities
09:00 — AI Ransomware & the Rise of AI in Cybersecurity
12:01 — Cyber Attacks on Major Corporations
17:20 — Reflections on Cybersecurity Trends
18:37 — Compensation Claims & Data Breaches
22:26 — SalesLoft Drift Breach: Implications & Insights
27:17 — Cyber Awareness & Phishing Campaigns
32:31 — AI, Misinformation & Media Risks
37:41 — Emerging Cybersecurity Threats
📩 For links, videos, and the newsletter – head to riskycreative.com
💬 Check Out This Episode's Discussion Points
📧 [email protected]
🔗 riskycreative.com
🎵 Our Intro & Outro Song (© 16! by falling forever)
License: https://creativecommons.org/licenses/by/4.0
View all episodes
By Risky CreativeThis week on The Awareness Angle, Anthony Davis and Luke Pettigrew kick off Cybersecurity Awareness Month with new short videos made in collaboration with Hoxhunt—covering spear phishing, deepfakes, and the psychology behind social engineering. Then it’s straight into the big security stories of the week: from iCloud phishing invites to Scattered Spider’s latest breach, and why even attackers are installing antivirus.
🎉 Free Hoxhunt Cybersecurity Awareness Month videos on AI phishing, deepfakes, and messaging scams. https://hoxhunt.com/cam-toolkit
📅 Apple iCloud Calendar Phishing – Scammers use Apple’s own domain to push fake calendar invites tied to PayPal scams. If it looks odd, it probably is—delete, don’t click.
✈️ Qantas Breach & Accountability – Scattered Spider strikes again, hitting 5.7M customers. Qantas cut exec bonuses by 15%—a rare move leaders elsewhere might want to note.
🎥 Nexar Dashcam Database Leak – 130TB of video, GPS, and metadata left exposed in an AWS bucket. Dashcams are becoming rolling surveillance devices—often with little oversight.
🕵️ Inside the Attacker’s Browser – Huntress stumbled onto open C2 servers, exposing adversary tools, comms, even their use of Bitdefender and Malwarebytes. A rare window into cybercrime operations.
🎮 Plex Breach & Messaging Missteps – Usernames, emails, and hashes leaked. Plex’s reset advice was buried in long paragraphs—a reminder that breach comms need to be blunt and clear.
📜 Reddit’s Wildest Breaches – Job scams running PowerShell commands, council-wide malware spreads, and SOC analysts debating true vs false positives. We unpack what awareness pros can take from the chaos.
🎭 Deepfakes vs Reality – A Trump clip went viral with viewers insisting it was AI. ITV even shared it as genuine before higher-res footage confirmed it was real. Awareness lesson: in 2025, people doubt the truth as much as they fall for fakes.
The week’s major cyber headlines, decoded into useful takeaways—and sprinkled with moments that make you raise an eyebrow.
🕒 Timestamps
00:00 — Introduction & Milestone Celebration
02:57 — Cybersecurity Awareness & Community Engagement
06:00 — Password Manager Vulnerabilities
09:00 — AI Ransomware & the Rise of AI in Cybersecurity
12:01 — Cyber Attacks on Major Corporations
17:20 — Reflections on Cybersecurity Trends
18:37 — Compensation Claims & Data Breaches
22:26 — SalesLoft Drift Breach: Implications & Insights
27:17 — Cyber Awareness & Phishing Campaigns
32:31 — AI, Misinformation & Media Risks
37:41 — Emerging Cybersecurity Threats
📩 For links, videos, and the newsletter – head to riskycreative.com
💬 Check Out This Episode's Discussion Points
📧 [email protected]
🔗 riskycreative.com
🎵 Our Intro & Outro Song (© 16! by falling forever)
License: https://creativecommons.org/licenses/by/4.0