Calendar Spy: How “Indirect Prompt Injection” Turned Google Gemini Into a Spy

Researchers disclosed an "indirect prompt injection" vulnerability against Google Gemini where a malicious calendar invite description caused the assistant to summarize private meetings and write them into a newly created calendar event, effectively exfiltrating sensitive schedule data; Google mitigated the issue, and the report highlights challenges of detecting semantic prompt-based attacks as AI agents gain action capabilities.