Do Son Unit 42 reveals the first real-world cases of Indirect Prompt Injection (IDPI), where hackers weaponize website content to bypass AI security filters.
Indirect Prompt Injection
Researchers found a flaw in Google Gemini allowing "Indirect Prompt Injection" via calendar invites to steal private meeting data. The issue is now mitigated.