Anthropic just released Claude Fable 5, calling it the most powerful AI model it has ever made widely available and praising its skills in biology, among others. But the model won’t answer basic biology questions — the kind you’d expect a high schooler to handle. Instead, it hands off the query to the former flagship model, Claude Opus 4.8.
Technology
How I almost fell for a Microsoft 365 Calendar invite scam
NEWYou can now listen to Fox News articles!
There’s a new phishing scam that’s sneaking past inbox filters in unexpected ways. Instead of sending suspicious links or obvious malware, this one uses something most people trust: calendar invites. Microsoft 365 and Outlook users are being targeted by a tactic that injects fake billing alerts directly into their calendars. Sometimes it includes malicious attachments, but in other cases, it exploits the default settings of calendars. Paul from Cape Coral, Florida, wrote us to share his experience:
“I had a very disturbing experience with a phishing attempt that almost had me hooked. I’m a Microsoft 365 subscriber and recently got the usual renewal emails. But a few days later, I started getting meeting invites saying my payment failed — they showed up directly on my calendar, even though I never opened or clicked anything. I got nervous when I tried to delete them and saw the only option was ‘delete and decline,’ which might have triggered a response to the attacker. I’ve never seen anything like this before.”
Paul verified his subscription status and avoided interacting with the event, which was the safest move, but his story highlights how easily this type of scam can slip through. Here’s how the attack works, and what to do if it shows up on your calendar.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM/NEWSLETTER.
A woman using Microsoft 365 calendar. (Kurt “CyberGuy” Knutsson)
How the Microsoft 365 calendar invite scam works
This type of phishing combines fake calendar events, Microsoft branding, and social engineering tactics to trick users into handing over personal information or clicking on malicious content.
It starts with a fake billing alert: The message appears to be from Microsoft 365, warning that your subscription renewal has either failed or been renewed. Some versions include an .htm attachment designed to look like a billing portal that captures credit card details.
The calendar invite adds pressure: Many of these scams include a calendar file (.ics) that places the event directly on your calendar. If your Microsoft 365 or Outlook settings automatically accept invites, the event appears without you doing anything.
The event looks official: Titles like “Payment Failed” or “Account Suspended” are used to trigger a quick reaction. Even if you never click a link, just seeing the event may prompt panic or confusion.
Deleting can confirm your identity: If your only option is “Delete and Decline,” that sends a response back to the sender. This confirms that your email is active and being monitored, which makes you a bigger target.
Scammers use compromised domains: These events often come from addresses that appear legitimate at a glance but are actually sent through hijacked third-party domains like .shop sites. Some even pass basic security checks, making them harder to detect.
Why Microsoft 365 phishing invites bypass email filters
This tactic is effective because it exploits a loophole in how Microsoft 365 processes calendar invitations. Even if a phishing email is flagged or blocked, the calendar event associated with it can still appear on your calendar. Here’s how:
It bypasses traditional email filters: Tools like Microsoft Defender scan incoming messages for bad links and attachments, but in this case, the attacker sends a malicious calendar invite that gets processed by Microsoft’s backend calendar services. So even if the email itself gets caught, the event still lands on your calendar.
You don’t have to click or open anything: If your settings allow calendar invites to be added automatically, that fake billing alert can show up instantly, making it feel urgent and legitimate, especially when it looks like it’s from Microsoft.
It exploits trust in internal tools: Because the invite appears inside Microsoft 365 or Teams, tools you use every day, it feels more “real” than an email from a random domain. That trust is exactly what scammers are counting on.
Microsoft 365. (Kurt “CyberGuy” Knutsson)
What to do if you get a phishing calendar invite in Microsoft 365
If a suspicious calendar event shows up and you didn’t accept it yourself, do not interact with it. Don’t click links, don’t download attachments, and don’t decline the invite; even that response can confirm your email is active.
Outlook is Microsoft’s interface for managing email and calendar events, and it comes in several different versions. The instructions below cover all three:
- New Outlook: The modern web-based and desktop app bundled with Microsoft 365 (formerly Office 365). Most users on Microsoft 365 today are using the new Outlook.
- Classic Outlook: The older desktop version (common in corporate setups) with more granular calendar settings.
- Outlook.com: The free personal version of Outlook that you access through a web browser. It shares many features with the new Outlook, but some settings are unique to the web version.
Most people using Microsoft 365 today are on the new Outlook. Here’s what to do next, depending on your version:
A woman using Microsoft 365 on her laptop. (Kurt “CyberGuy” Knutsson)
1) Don’t click or decline the phishing calendar invite
It might be tempting to hit “Decline” and move on, but that can actually send a response back to the attacker, letting them know your account is active. Previewing the event is generally safe, but avoid clicking links, opening attachments, or interacting with it in any way.
2) How to delete a phishing calendar event without alerting the attacker
New Outlook (desktop or web): This version no longer offers a “delete without response” option from the calendar view, making it trickier to handle suspicious invites. Here’s what you can do instead:
- Option 1: Leave it alone – If the event is already on your calendar and there’s no inbox email to ignore, your safest bet is to leave it untouched. Even if you uncheck “Email organizer,” it still logs your RSVP. In the new Outlook, there’s no way to fully disable this tracking.
Option 2: Use “Ignore” from the inbox – This won’t necessarily remove the event from your calendar, but it’s a helpful way to get rid of the email without sending a response.
- Go to your Inbox view (not your calendar)
- Find the calendar invite email
- Right-click and choose Ignore
This will move the email to your Trash without sending any response or showing RSVP tracking. However, in some cases, the event may remain on your calendar, and you can delete it manually afterward. Based on testing, this usuallydoesn’t notify the sender, but there is still no guarantee that RSVP tracking is avoided. If the invite is still on your calendar, the safest approach is to leave it.
Note: The “Ignore” option is only available in the inbox/mail view. If you try to manage the invite from the calendar view, your only options are Accept, Tentative, or Decline, all of which either notify the sender or leave behind RSVP tracking.
Classic Outlook desktop (older version)
This version still gives you a clean, no-reply option:
- Right-click the event in your calendar
- Choose Delete
- Select “Do not send a response” when prompted
This removes the invite without alerting the sender or recording your RSVP.
3) Change Outlook settings to block calendar spam and phishing invites
New Outlook
Unfortunately, there is no way to prevent meeting invites from being automatically added to your calendar. Microsoft removed this control in newer versions, and users can only limit certain types of “Events from email” (such as travel reservations), not actual meeting invites.
Classic Outlook desktop
You can limit auto-processing of invites so Outlook doesn’t automatically add them:
- Go to File > Options > Mail
- Scroll to the Tracking section
- Uncheck “Automatically process meeting requests and responses to meeting requests and polls”
This doesn’t block invites completely, but it stops Outlook from acting on them without your input.
4) How to report a phishing calendar invite without alerting the sender
If the event also appeared in your inbox, you can report it using Outlook’s built-in phishing tool.
New Outlook
- Select the invite from your inbox
- In the toolbar ribbon, go to Home > Report > Report phishing
- Or right-click the email and choose Report > Phishing
Do not forward the invite from the calendar, as this may notify the sender and confirm your account is active.
If the phishing report button doesn’t work, you can email a report to phish@office365.microsoft.com. To do this safely:
- Open the email in your inbox view
- Click the three dots on the top right of the message
- Select Other reply actions > Forward as attachment
This method forwards the email as an attachment, avoiding the risk of sending the actual invite and notifying the sender.
Classic Outlook
- Go to your Inbox
- Open the calendar invite email (don’t just select it from the inbox)
- In the top ribbon, click Report phishing or Report message
To manually forward it to Microsoft:
- Open the email in your Inbox view
- Click the three dots on the top right of the message > Forward as attachment
- Send to phish@office365.microsoft.com
Again, do not forward directly from the calendar. Always forward from the inbox view using “Forward as Attachment” to avoid interacting with the calendar invite or notifying the sender.
5) Check your Microsoft account for signs of phishing or hacking and install strong antivirus
Even if you didn’t interact with the invite, it’s smart to review your account just in case:
- Go to mysignins.microsoft.com
- Review your recent sign-ins and devices
- Change your password if anything looks off
- Make sure two-factor authentication (2FA) is turned on
Once you’ve checked your account activity, it’s also worth strengthening your defenses moving forward. The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.
Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android & iOS devices at CyberGuy.com/LockUpYourTech.
6) Monitor your identity after a phishing attempt
If your email or login info has been exposed, scammers may try again later. Use an identity protection service to scan the dark web for leaked credentials and alert you before they can be misused.
Identity Theft companies can monitor personal information like your Social Security Number (SSN), phone number, and email address, and alert you if it is being sold on the dark web or being used to open an account. They can also assist you in freezing your bank and credit card accounts to prevent further unauthorized use by criminals.
See my tips and best picks on how to protect yourself from identity theft at Cyberguy.com/IdentityTheft.
7) Remove your personal info from data broker sites to avoid future scams
Scammers often buy personal information from data broker sites, which makes it easier for them to target you again later. A removal service can help stop that by automatically scanning and deleting your data from hundreds of these sites.
Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com/Delete.
Get a free scan to find out if your personal information is already out on the web: Cyberguy.com/FreeScan.
Kurt’s key takeaways
If a suspicious event suddenly shows up on your calendar, avoid interacting with it. That means no clicking, no declining, and no replies of any kind. Just opening the event is usually safe, but responding in any way can let scammers know your account is active. The new Outlook versions make this harder to manage, so the safest move is to leave the event alone, report it from your inbox, and double-check your account security. Until Microsoft adds stronger controls, calendar scams will continue to sneak through, but a few careful steps can keep you protected.
What responsibility does Microsoft have to protect users from security flaws in its own ecosystem, especially when default settings can expose people to phishing attacks without their knowledge? Let us know by writing to us at Cyberguy.com/Contact.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM/NEWSLETTER.
Copyright 2025 CyberGuy.com. All rights reserved.
Bluesky will be getting “communities,” which will function as smaller spaces where you can “go deeper and hang out with people who care about the same stuff” sometime this year, according to head of product Alex Benzer. They will be built on the decentralized AT Protocol that underpins Bluesky, with Benzer saying that “it’s a new structure for everyone” that’s part of the “Atmosphere” (a shorthand for the AT Protocol ecosystem).
Benzer listed out a “few ideas we have in mind so far” in a thread. “On Bluesky, you’ll be able to create communities, join them, post in them, and get updates,” Benzer says. “The core features on Bluesky stay simple. The magic comes from communities also existing on the open web. This means you can truly customize them and add features with other Atmospheric apps and tools.”
Communities will get a handle that “doubles as a URL,” and if you go to that URL, you’ll “land on a custom homepage for the community,” according to Benzer. “Builders can also host a completely custom experience there instead.” There will be three privacy levels for communities: public, invite-only, and private. And each community would have its own feed, Benzer says.
Benzer’s thread follows Bluesky COO Rose Wang saying last week that the company wanted to move away from being a “public square” and that it was “very inspired by companies like Reddit.” Meta’s Threads is currently testing a communities feature, while X announced in April that it would be shutting down its own take on communities.
NEWYou can now listen to Fox News articles!
Amazon is getting ready for Prime Day, and you can bet scammers are, too. In fact, I received a fake Amazon email that looked like an account recovery warning. It claimed there was unusual activity on my account and pushed me to “Sign In to Verify.”
That kind of message can make anyone uneasy. It certainly did for me. After all, who wants to lose access to an account right before a major sale? Then came the part that really stood out: the email said I might need to upload a document to confirm my account.
That was the giveaway. A real deal can save you money. A fake Amazon email can cost you your login, your payment details and even your identity.
Here’s how this scam works, the red flags that exposed it and the steps you should take before clicking any Amazon account warning.
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
A fake Amazon account recovery email is targeting shoppers ahead of Prime Day, using urgency and document requests to steal sensitive information. (Photographer: David Paul Morris/Bloomberg via Getty Images)
Fake Amazon email warning before Prime Day
The timing made this phishing email more convincing. With Prime Day coming up, many people are already watching for Amazon emails. They may be checking delivery updates, deal alerts and order confirmations. That creates the perfect opening for a fake account warning.
The email used the same tricks you see in many phishing scams. It claimed there was account trouble, used urgent language and pushed me toward a sign-in button. That is exactly what scammers want.
Screenshot of scam fake Amazon email (Kurt “CyberGuy” Knutsson)
They want you to react before you inspect the message. They want you to sign in before you think through the request. And in this case, they wanted me to believe a document upload was part of a normal Amazon account check.
Amazon phishing scam red flags
This fake Amazon email had several warning signs. First, it landed in my junk folder. That alone does not prove fraud, but it should make you cautious.
Second, the subject line sounded awkward. It said, “Account Recovery: Sign-in and Verify your Amazon account.” That wording felt stiff and a little off.
Third, the greeting was generic. The email said “Dear Customer” even though it claimed to be about my Amazon account. That alone does not prove the email is fake, but it adds to the concern.
Fourth, the message created urgency. It claimed the account was on hold and that orders or subscriptions had already been canceled.
Fifth, the sender display name said “Amazon,” while the address appeared as account_update@amazon.com. That may look official at first. Still, scammers can spoof sender names or make email addresses look convincing.
Under the yellow “Sign In to Verify” button, the email also says, “Don’t share it with others.” That may sound protective, but in this context, it felt like another attempt to make the fake warning seem official.
The biggest warning sign came from the document request. The email said I would have the option to upload a document with the required information to verify the account.
That should stop you cold. Scammers may be after more than your Amazon password. They may also want your driver’s license, passport, address, phone number or payment details.
Screenshot of fake Amazon email sender address (Kurt “CyberGuy” Knutsson)
Why fake Amazon account emails fool shoppers
This scam works because it hits a very real fear. Most people do not want to lose access to an online shopping account. That concern grows when a big sale is about to start. If you are planning to buy something on Prime Day, an account warning can feel urgent.
The email also borrowed Amazon’s familiar look. It used the Amazon name, a logo area and a yellow sign-in button. It also included a footer that appeared to show an Amazon.com link. That can make the message feel safer than it really is.
Here is the problem. The visible link text in an email can mislead you. A link can appear to point to Amazon while sending you somewhere else. It can also pass through tracking links, redirects or look-alike pages. That is why you should avoid signing in through any account warning email.
120,000 FAKE SITES FUEL AMAZON PRIME DAY SCAMS
Scammers are impersonating Amazon with convincing account alerts designed to capture login credentials, payment details and personal documents. (Photographer: Michael Nagle/Bloomberg via Getty Images)
What happens if you click a fake Amazon link
If you click the link, you may land on a fake Amazon sign-in page. It may look close enough to fool you. Once you enter your email and password, scammers can try to access your real Amazon account. They may check your saved payment methods, shipping addresses and order history.
They may also try that same password on other websites. That becomes a bigger risk if you reuse passwords.
The document request adds another layer of danger. If a fake page asks for your ID, scammers could use that information for identity theft, account takeovers or other fraud. That is why one quick click can turn into a much bigger mess.
Ways to stay safe from fake Amazon emails
A fake Amazon email can look convincing at first, so the best move is to slow down and use these simple checks before you click, sign in or share anything.
1) Do not click the sign-in button
Skip buttons like “Sign In to Verify,” “View details” or “Restore access.” Open the Amazon app or type Amazon.com into your browser yourself.
2) Check Amazon’s Message Center
After signing in directly, go to Your Account > Message Center. If the alert is real, you should see a matching message there.
3) Watch for pressure language
Scammers often say your account is locked, your orders were canceled, or you must act right away. That pressure is designed to make you click before thinking.
4) Never upload ID through an email link
If an email asks for a passport, driver’s license or other document, stop. Contact Amazon through the app or website before sending anything.
5) Use a password manager
A password manager can help you spot fake login pages. If the page is fake, your saved Amazon password usually will not autofill. Check out the best expert-reviewed password managers of 2026 at CyberGuy.com.
6) Turn on two-step verification
7) Use strong antivirus software
Install strong antivirus software on your computer, phone and tablet. Good security software can help detect malicious links, phishing pages, malware and other threats before they do damage. This is especially important if you clicked a suspicious link or downloaded anything from a fake email. Security software should back up your smart habits, not replace them. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.
8) Use a data removal service
Scammers often build more convincing attacks with information they find about you online. That can include your name, address, phone number, relatives, old usernames and other personal details from people-search sites and data brokers. A data removal service can help remove your personal information from many of those sites. That makes it harder for scammers to personalize phishing emails and identity theft attempts. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com.
9) Report the suspicious email
Forward suspicious Amazon emails to reportascam@amazon.com. Then delete the message from your inbox or junk folder.
JANUARY SCAMS SURGE: WHY FRAUD SPIKES AT THE START OF THE YEAR
Cybersecurity experts warn consumers to avoid clicking links in Amazon account warning emails and verify alerts directly through Amazon. (David Paul Morris/Bloomberg via Getty Images)
Kurt’s key takeaways
Prime Day is a great time to find real deals, but it is also a busy season for fake Amazon emails. Scammers know shoppers are checking delivery updates, watching for discounts and hoping nothing gets in the way of a good buy. That is what made this email so sneaky. It used a familiar fear at the perfect moment: losing access to your account right before a major sale. The safest move is to slow down before you click. Do not trust the button. Do not trust the sender name alone. Open the Amazon app or type Amazon.com into your browser and check your account yourself.
Have you ever received an email that looked official enough to make you click, and what finally made you stop? Let us know by writing to us at CyberGuy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
HOW TO DETECT FAKE AMAZON EMAILS AND AVOID IMPERSONATION SCAMS
Copyright 2026 CyberGuy.com. All rights reserved.
It isn’t because Fable doesn’t know the answers. It’s because Anthropic won’t let it, by design.
Fable is a public-facing, Mythos-class model, a family so capable at cybersecurity tasks Anthropic said it was too dangerous to release publicly. But while Anthropic has spent much of the extended Mythos rollout warning about cybersecurity, it is biology where Fable’s guardrails are the most obvious — and most limiting.
When I tried the model, it refused to answer a range of basic biology questions, many that felt about as far away from any plausible safety risk as any question could be. It would not respond to “tell me about cell membranes” or answer “what are mitochondria,” that famous powerhouse of the cell. It refused to explain “what is a prion,” the proteinaceous particles behind mad cow disease, or “how mRNA vaccines work.”
“We made this tradeoff so customers could benefit from the model’s capabilities sooner without the risks.”
The restrictions applied to ordinary and objectively rather harmless medical queries too. Fable would not answer “what causes hay fever,” explain how asthma medicine works, explain how antibiotic resistance arises, or tell me what Ebola is and how it spreads. Some of my basic queries occasionally got through, with Fable answering questions like “what is cancer” and “what is DNA.” When Fable refused, Opus 4.8 generally answered perfectly well.
Anthropic says the broad biology filters are an intentional choice and are deliberately conservative, with bioweapons the primary concern. “With the launch of Claude Fable 5, our first Mythos-class model, we believe models now have a greater ability to accomplish real-world scientific tasks and for malicious actors to potentially use our models for highly risky biological research,” spokesperson Paruul Maheshwary told The Verge. “We have always used classifiers to block our models from helping with bioweapons-related requests. To deploy Fable 5 safely, we believe it was necessary to be overly conservative with our safeguards so they block most queries tied to biology work.”
Anthropic has previously highlighted four key areas where it would throttle Fable’s responses for safety: chemistry, biology, cybersecurity, and distillation, a technique for training smaller AIs using the outputs of larger ones. The company has accused Chinese rivals like DeepSeek of using distillation on its models on an “industrial” scale.
While I could not meaningfully test distillation, Fable seemed more willing to answer questions about chemistry and cybersecurity. For example, it gave a basic overview of the explosive TNT, though withheld synthesis instructions “for obvious reasons.” It readily answered questions on the use of chlorine gas as a chemical weapon, common password threats, and nuclear fusion and fission, as well as explaining how to secure an iPhone from hackers. It still limits: Fable deferred to Opus when I asked it about sarin gas, a highly toxic nerve agent. Fable and Opus both refused the prompt “how to make anthrax,” and Claude paused the chat entirely. That made sense. The mitochondria prompt refusal seems like a false positive.
“We made this tradeoff so customers could benefit from the model’s capabilities sooner without the risks,” Maheshwary explained, adding that Anthropic is working hard to improve its detection and reduce the false positives. “We intend to make Mythos-class models available without these safeguards to the broader biology and life sciences community so these capabilities can be used to accelerate biomedical research and drug discovery.”
Anthropic did not answer questions about whether this kind of restricted release will become the new norm for future models.
Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.
-
Dallas, TX2 minutes agoWoman arrested in Dallas food delivery turned ambush shooting in March, officials say
-
Miami, FL8 minutes ago2026 Miami Football Early Opponent Preview, Game 2: Florida A&M
-
Boston, MA15 minutes agoMinivan in rollover wreck in Dorchester – Boston News, Weather, Sports | WHDH 7News
-
Denver, CO17 minutes agoIs Denver hosting 2026 World Cup matches? No, and here’s why
-
Seattle, WA23 minutes agoCars not welcome: How to navigate Seattle on World Cup game days – MyNorthwest.com
-
San Diego, CA30 minutes agoPadres minors: Jhony Brito solid in El Paso start, Kerrington Cross leads Storm to win
-
Milwaukee, WI33 minutes agoMilwaukee Music Premiere: Wisconsin Space Program, ‘Time Machine’
-
Atlanta, GA45 minutes agoAtlanta World Cup: Additional watch parties in metro Atlanta
