{
 "id": "AIR-2026-0361",
 "slug": "prompt-based-attacks-against-gemini-via-calendar-invitations",
 "title": "Prompt-Based Attacks Against Gemini via Calendar Invitations",
 "summary": "Researchers demonstrated how malicious instructions embedded in Google Calendar invitations and shared files could influence Gemini assistants during retrieval. The indirect prompt injection caused the model to misuse authorized tools.",
 "type": "attack_on_ai",
 "categories": [
  "prompt_injection",
  "agent_hijack"
 ],
 "severity": 1,
 "targets": [
  "Google",
  "enterprise_deployment"
 ],
 "products": [
  "Gemini"
 ],
 "incident_date": "2025-08-06",
 "incident_date_precision": "day",
 "first_reported": "2026-07-31",
 "sources": [
  {
   "url": "https://atlas.mitre.org/studies/AML.CS0063",
   "publisher": "MITRE ATLAS",
   "title": "Prompt-Based Attacks Against Gemini via Calendar Invitations",
   "published_at": "2026-07-31"
  },
  {
   "url": "https://safebreach.com/blog/invitation-is-all-you-need-hacking-gemini",
   "publisher": "safebreach.com",
   "title": "Invitation Is All You Need: Hacking Gemini",
   "published_at": "2026-07-31"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_atlas",
 "tags": [
  "gemini",
  "indirect-prompt-injection",
  "calendar"
 ],
 "created_at": "2026-10-18T06:55:08.239Z",
 "updated_at": "2026-10-18T06:55:08.239Z"
}