GOOGLE GEMINI FOR WORKSPACE HIJACKS EMAIL SUMMARIES FOR PHISHING

Summary from the TLDR InfoSec newsletter

A security researcher discovered an indirect prompt-injection attack on Google's Gemini model. The prompt injection attack involves including invisible instructions for Gemini in emails. When a user then uses Google Gemini for Workspace to summarize the email, Gemini will follow the instructions and may include phishing links or misinformation in its summary.