Google Gemini Flaw Let Attackers Access Private Calendar Data

Miggo researchers disclosed a prompt-injection flaw in Google Gemini’s Calendar integration that let attackers hide natural-language instructions in event descriptions; when triggered by routine user queries, Gemini could summarize private meetings and create events exposing those details to the attacker. Google confirmed the findings and implemented mitigations.