Invisible HTML Prompts Let Gemini Inject Phishing Alerts into Email Summaries
A researcher showed that hidden HTML prompts in Gmail can trick Google Gemini for Workspace into inserting phishing warnings into AI-generated email summaries. The attack bypasses existing prompt‑injection defenses and needs only a user to click “Summarize this email,” making it a stealthy vector without links or attachments. Google says mitigations are being rolled out but no real‑world abuse has been seen yet.