Google has expanded the Calendar settings available to Workspace administrators, giving businesses finer control over who can send meeting invitations to staff.

• What it is: The Admin console now offers more granular options for inbound calendar invitations, letting admins decide whether staff receive invites from everyone, only people in the organisation, or a more restricted list.
• Who is affected: All Google Workspace customers. The setting defaults to "From everyone," so no change occurs unless an admin adjusts it.
• The risk: Calendar invites from unknown senders are increasingly used to deliver phishing links and spam, since many people trust an incoming meeting invite more than an email.
• What to do: Consider tightening invitation settings for staff who do not need to receive external meeting invites, either organisation-wide or for specific groups.

We recommend reviewing your Calendar settings in the Admin console and adjusting them for any team that regularly receives unsolicited meeting invites.

Source: Google Workspace Updates