Malicious Notifications Could Trick Google Gemini Users

Summary

A prompt injection vulnerability in Google Gemini's voice assistant allows attackers to embed malicious commands within notifications that users receive, potentially enabling social engineering attacks and unauthorized actions. The flaw exploits the assistant's processing of notification content, which can be manipulated to execute unintended commands or trick users into providing sensitive information.

Entities