RESEARCHERS DESIGN “PROMPTWARE” ATTACK WITH GOOGLE CALENDAR TO TURN GEMINI EVIL

Summary from the TLDR InfoSec newsletter

Researchers demonstrate a “promptware” attack using malicious Google Calendar events to manipulate Gemini AI into controlling smart home devices. The exploit uses indirect prompt injection via calendar descriptions, triggering real-world actions. Google has now patched the flaw, adding protections and confirmation dialogs for sensitive actions.