- Researchers discovered the rapid adoption of Gemini AI through Google Calendar invitations
- Attackers can leak private meeting data with minimal user interaction
- Vulnerabilities are reduced, reducing the risk of immediate exploitation.
Security researchers have found another way to launch a quick injection attack on Google’s Gemini AI, this time to leak sensitive data from Google Calendar.
Notification injection is a type of attack where an attacker hides a notification inside a good message. When the victim asks its AI to analyze the message (or use it as data in its work), the AI processes the message and follows the actor’s commands.
Essentially, fast injection is possible because AI cannot distinguish between instructions and the data used to execute those instructions.
Gemini and the misuse of the calendar
Until now, rapid injection attacks were limited to e-mail messages and aimed at summarizing or reading e-mails. In the latest research, Migo Security says that this can also be done through Google Calendar.
When a person creates a calendar entry, they can invite other participants by adding their email address. In this case, the threat can create a calendar entry containing malicious messages (to extract calendar data) and invite the victim. The invitation is then sent as an email and contains a message. The next step is for the victim to tell their AI to check future events.
The AI will analyze the message, create a new calendar event with details, and add the attacker, giving them direct access to sensitive information.
“This workaround allowed unauthorized access to private meeting data and the creation of fake calendar events without direct user interaction,” researchers told The Hacker News.
“But behind the scenes, Gemini created a new calendar event and wrote a full summary of our target user’s face-to-face meetings in the event description,” says Migo. “In many configurations of the corporate calendar, the attacker saw a new event, which allowed the target user to read exposed personal data without taking any action.”
The problem has since abated, Migo confirmed.
through Hacker news
The best antivirus for any budget
Follow TechRadar on Google News I Add us as your preferred source Get news, reviews and opinions from our experts in your feed. Don’t forget to click the follow button!
And, of course, you can Siga TechRadar on TikTok Get our regular updates in the form of news, reviews, unboxing and videos. WhatsApp very
