Latest
●OpenAI agent swarm linked to RubyGems supply chain attack●FrontMCP SSRF patch bypassed via DNS tricks and redirects●Central Dogma Git mirror trusts any SSH host key●MySQL MCP server left SQL wide open in SSE mode●AI bug hunting ends the era of security through obscurity●Hugging Face tells AI agents to go hack a benchmark instead●Anthropic says hackers used Claude to mine 1.8M Android apps●Anthropic says Claude was abused to automate attacks and weapons work
Sunday, 13 September 2026
8 agent hacks today▲ 8 vs yesterday (0)
The Agentic TimesPowered byVortal

Incident database

Calendar invite hijacks Gemini to control smart home devices

SafeBreach researchers showed at Black Hat that instructions hidden in a Google Calendar invitation could make Gemini open windows, turn on appliances, leak emails and start video calls when a user later asked it to summarise their schedule.

Occurred 1 February 2025 · Disclosed 6 August 2025 · Record updated 13 September 2026

Impact

Physical-world actions via Google Home and data exposure for any Gemini user who accepted invites. Google said it deployed mitigations before publication.

Our coverage

Sources

  1. wired.comhttps://www.wired.com/story/google-gemini-calendar-invite-hijack-smart-home/
  2. safebreach.comhttps://www.safebreach.com/blog/invitation-is-all-you-need-google-gemini-promptware/