Promptware – Hackers Exploit Google Calendar Invites to Stealthily Stream Victim’s Camera via Zoom

The report summarizes new research that reframes prompt injection as 'Promptware'—malicious prompts that can act like malware—and presents a seven-stage kill chain showing how attackers can weaponize everyday tools (example: a Google Calendar invite triggering an AI assistant to start a Zoom stream) to spy, persist, and propagate. The authors warn that as LLMs gain deeper access to system tools, the attack surface and potential impact grow, and they call for defense-in-depth across the kill chain.