Should MSPs Turn Off Google Gemini? Gemini Flaw Hijacks Email Summaries

This advisory warns that attackers can embed hidden HTML/CSS in emails to perform prompt-injection against Google Gemini’s email summarization, causing the model to surface malicious instructions (e.g., phishing contact details) that users may trust; the behavior has been demonstrated as a PoC but not observed in the wild, and the report recommends user education, email content scanning, post-processing of AI outputs, and layered security controls for MSPs.