Google has confirmed it is working on a fix for a malicious invites problem that leaves more than a billion Calendar users exposed to attack