Poisoned Android notifications could hijack Google Gemini via prompt injection

Researchers discovered a vulnerability where malicious notifications from apps like WhatsApp or Slack could hijack the Google Gemini voice assistant on Android devices. This attack vector, known as indirect prompt injection, allowed attackers to deliver payloads through standard message notifications without requiring a malicious app on the phone....

Read the full article at the source.