Notification Hijacking: How WhatsApp and Slack Content Could Weaponize Google Gemini

Researchers uncovered a significant security flaw in Google Gemini on Android, where prompt injection vulnerabilities allow malicious content in notifications from apps like WhatsApp and Slack to compromise the service without requiring any special permissions. This means even benign messages can be weaponized to execute harmful instructions, raising concerns about data security and privacy. The discovery highlights the need for tighter controls and more robust security measures to protect users from such sophisticated attack vectors.