Smart Home Hacked Through AI Calendar Trick

Researchers found a sneaky way to trick Google's Gemini AI into controlling smart home gadgets. They did this by hiding harmful commands in calendar invites. These commands could make the AI open windows or even say cruel things to users. The trick works like this: when someone asks Gemini to read their calendar, the AI also reads the hidden commands. Later, when the user says certain words like "thanks, " the AI follows the hidden orders. This bypasses Google's safety checks. One researcher, Johann Rehberger, showed that this trick can have real-world effects. He warned that hackers could use it to control devices in people's homes without permission. For example, they could turn on the heat or open windows. The researchers also found other ways to trick Gemini. They could make the AI say hurtful things or delete calendar events. In one case, they made Gemini start a video call without the user asking. These tricks, called "promptware, " show how AI can be manipulated. They don't require advanced tech skills, making them a serious threat. The researchers say these attacks are rare but highlight the need for better AI security.