As a surge in malicious .ics invite attacks is reported, here’s what Google and Microsoft calendar users need to do immediately.