Google Patches Zero-Click GeminiJack Vulnerability That Exposed Corporate Workspace Data

Summary

Security researchers discovered an architectural vulnerability in Google Gemini Enterprise and Vertex AI Search, dubbed 'GeminiJack,' that enabled zero-click indirect prompt injection attacks capable of exfiltrating sensitive corporate data. The flaw allowed attackers to embed malicious instructions in common documents across Gmail, Google Calendar, Google Documents, and other Google Workspace components that Gemini Enterprise has access to. When Gemini retrieved an attacker's document, it misin