- Prompt injection flaw found in Android Gemini
- Malicious notifications mix benign and hidden commands
- Google patched issue server‑side last November
Prompt injection attacks are not reserved for email messages or calendar entries only. They can also be done on Android, using pretty much any communications platform in existence today. This is what SafeBreach's researcher Or Yair said in a new report.