A calendar entry became a Trojan horse
Experts warn a single calendar entry can silently hijack your smart home without your knowledge
Researchers proved AI can be hacked to control smart homes using only words
Saying “thanks” triggered Gemini to switch on the lights and boil water automatically
The promise of AI-integrated homes has long included convenience, automation, and efficiency, however, a new study from researchers at Tel Aviv University has exposed a more unsettling reality.
In what may be the first known real-world example of a successful AI prompt-injection attack, the team manipulated a Gemini-powered smart home using nothing more than a compromised Google Calendar entry.
The attack exploited Gemini’s integration with the entire Google ecosystem, particularly its ability to access calendar events, interpret natural language prompts, and control connected smart devices.From scheduling to sabotage: exploiting everyday AI access
Gemini, though limited in autonomy, has enough “agentic capabilities” to execute commands on smart home systems.
