Google Gemini Prompt Injection Flaw Exposed Private Calendar Data via Malicious Invites

Google Calendar’s privacy controls hiding a dormant malicious payload within a standard calendar invite; the bypass enabled unauthorized access to private meeting data and the creation of deceptive calendar events.