A researcher has found Google’s Gemini for Workspace can be tooled to serve up phishing messages under the guise of ...

Researchers have uncovered a serious flaw in Google Gemini for Workspace that allows emails with hidden commands to trick the assistant into issuing fake security alerts.

The exploit, known as a prompt injection attack, evades detection by reducing the prompt font size and changing it to white to blend in.