Gemini Gets Invited to a Party It Shouldn't Attend: Calendar Invite Hijacks Google's AI
Ourtake
A calendar invite can now run your smart home. Nobody sent a calendar invite to the lights, and yet.
What happened
Israeli researchers from Tel Aviv University, the Technion and SafeBreach showed that Google's Gemini assistant can be hijacked by prompts hidden in calendar invites, emails or shared documents, leading to data leaks and control of smart home devices. Google learned of the flaws in February 2025 and says it has deployed mitigations, including user confirmations for sensitive actions and a new prompt injection classifier.