A malicious calendar invite can trick Google's Gemini AI into leaking private meeting data through prompt injection attacks.

Using only natural language instructions, researchers were able to bypass Google Gemini's defenses against malicious prompt ...

A Google Calendar event with a malicious description could be abused to instruct Gemini to leak summaries of a victim’s private meetings.

This builds on Google's November 2025 upgrade that introduced a dedicated ownership model, essentially ensuring that all ...