Security researchers discovered a critical vulnerability in Google Gemini's Android voice assistant that could be exploited through malicious notifications from popular messaging apps like WhatsApp, Slack, SMS, Signal, Instagram, or Messenger. The flaw would allow attackers to hijack the assistant without requiring any malicious app installation, potentially enabling unauthorized access to connect
A single poisoned notification from WhatsApp, Slack, SMS, Signal, Instagram, or Messenger could have hijacked Google Gemini's voice assistant on Android and made it open a victim's connected windows, fake a message from their boss, push the phone into a Zoom call, or quietly poison its long-term memory. No malicious app on the phone is required. The assistant just had to treat a hostile
Originally published at thehackernews.com
60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.
