{
 "type": "bundle",
 "id": "bundle--9524d08d-c174-5cf5-8d44-386d593454e5",
 "objects": [
  {
   "type": "incident",
   "spec_version": "2.1",
   "id": "incident--bb2c6ae9-4b88-52e5-836c-92e953488a25",
   "created": "2025-08-06T00:00:00.000Z",
   "modified": "2025-08-06T00:00:00.000Z",
   "name": "Promptware: a poisoned Google Calendar invite hijacks Gemini to actuate smart-home devices",
   "description": "In \"Invitation Is All You Need,\" researchers from Tel Aviv University, the Technion and SafeBreach hid plain-English instructions in Google Calendar invites, emails and shared docs. When a user later asked Gemini for help in Gmail, Calendar or Assistant, the hidden prompt took over — in one demonstration a benign reply like \"thanks\" triggered Gemini to turn off lights, open windows and switch on a boiler through Google Home. The study defines 5 attack classes across 14 scenarios (context poisoning, stored-data manipulation, internal-tool abuse, escalation to Home, launching apps like Zoom); a TARA rating put 73% of the threats at high-critical. Google added mandatory confirmations for sensitive actions, URL filtering and an injection classifier.",
   "external_references": [
    {
     "source_name": "AgentDossier",
     "external_id": "TR-2026-013",
     "url": "https://sushegaad.github.io/AgentDossier/traces/tr-2026-013/"
    },
    {
     "source_name": "The Decoder",
     "url": "https://the-decoder.com/attackers-can-hijack-google-gemini-with-a-simple-prompt-hidden-in-a-calendar-invite/",
     "description": "Attackers can hijack Google Gemini with a simple prompt hidden in a calendar invite"
    },
    {
     "source_name": "TechRepublic",
     "url": "https://www.techrepublic.com/article/news-google-gemini-indirect-prompt-injection-attack/",
     "description": "Google Gemini vulnerable to calendar-based hack"
    }
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--306aab31-8066-5375-b8aa-532168669bc5",
   "created": "2025-08-06T00:00:00.000Z",
   "modified": "2025-08-06T00:00:00.000Z",
   "name": "Security researchers (Tel Aviv University, the Technion, SafeBreach), proof of concept",
   "roles": [
    "attacker"
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--ccda8b21-bcce-5bcd-8c12-4b99ac368bb5",
   "created": "2025-08-06T00:00:00.000Z",
   "modified": "2025-08-06T00:00:00.000Z",
   "name": "Google — mandatory confirmations for sensitive actions, suspicious-URL filtering, and an indirect-prompt-injection classifier across Gemini apps",
   "roles": [
    "defender"
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--8ee6f50d-92be-5985-b6f6-4d3d1a1ee1e5",
   "created": "2025-08-06T00:00:00.000Z",
   "modified": "2025-08-06T00:00:00.000Z",
   "name": "TA0001 Initial Access",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0001"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--fbbc9231-9328-5a45-a3ec-8a910b989225",
   "created": "2025-08-06T00:00:00.000Z",
   "modified": "2025-08-06T00:00:00.000Z",
   "name": "TA0002 Execution",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0002"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--6568fc4d-71d8-588d-9560-bc05015038a5",
   "created": "2025-08-06T00:00:00.000Z",
   "modified": "2025-08-06T00:00:00.000Z",
   "name": "TA0040 Impact",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0040"
    }
   ]
  }
 ]
}