WEAPONIZING CALENDAR INVITES: A SEMANTIC ATTACK ON GOOGLE GEMINI

Summary from the TLDR InfoSec newsletter

A seemingly normal calendar invite hides a natural-language payload in the event description, which Gemini processes when a user later asks about their schedule. This triggers Gemini to summarize private meetings, write the summary into a new event visible to the attacker, and reply with a harmless message.