Gemini for Workspace Obeys Whatever Email It Reads, and Google Calls That Intended

What happened

HiddenLayer researchers showed that Google's Gemini for Workspace can be manipulated through indirect prompt injections hidden in emails, Google Slides speaker notes and Google Drive documents, including shared ones. The proof-of-concept examples included phishing via Gmail and tampering with slide summaries. Google classified the reports as intended behavior rather than security issues.