[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Threat Hunting · markdown

confirmed research (Material Security threat research, Oct 1 and Oct 28; covered Nov 4)

Hunt: calendar-invite phishing proxied the real Google sign-in to steal live sessions past MFA; Material took down 897 domains

  • Workspace logs: look for sign-ins followed quickly by a new device or IP using the same session, OAuth grants right after a calendar-invite click, and new mail forwarding or filters.
  • Mail and calendar: flag external invites whose description links to google.com/url?q= or share.google and then go to newly registered domains. Consider requiring that external invites come only from known senders.
  • Fix: phishing-resistant MFA (passkeys or security keys) breaks this relay. SMS, TOTP and number-match prompts don't.
  • Material's whitepaper has the full indicator set.

Sources: Material Security: Reputation Says It's Fine: calendar invites and a live MFA proxy steal Google sessions · Material Security: 897 domains later, how Operation CloudFire burned the calendar-invite campaign · Material whitepaper (indicators, timeline)