Bad actors are said to be able to use hidden text to send invisible prompts to Gemini in Gmail, which the chatbot obeys.