EventCybersecurity
7 days ago
Google Gemini voice assistant hijackable via notifications
A prompt injection flaw in Google Gemini's voice assistant on Android lets attackers hide malicious commands in notifications from messaging apps like WhatsApp, Slack, and Signal. The attack could hijack the assistant to start Zoom calls, control smart home devices, or fake messages from a victim's boss.