Google Gemini Prompt Injection Flaw Exposed Private Calendar Data via Malicious Invites

Certains articles de veille peuvent faire l'objet de traduction automatique.

Cybersecurity researchers have disclosed details of a security flaw that leverages indirect prompt injection targeting Google Gemini as a way to bypass authorization guardrails and use Google Calendar as a data extraction mechanism.
The vulnerability, Miggo Security’s Head of Research, Liad Eliyahu, said, made it possible to circumvent Google Calendar’s privacy controls by hiding a dormant

Source : https://thehackernews.com/2026/01/google-gemini-prompt-injection-flaw.html