Prompt Injection Attacks

Google Says It Has Blocked Notification Attack That Could Hijack Gemini on Android

A server-side content‑classifier update stops a notification-based prompt injection technique and reduces the need for app updates while raising design questions about how assistants trust outside inputs.