emails

A security researcher has demonstrated how a malicious Google Calendar invite can prompt-inject ChatGPT and coax it into leaking private emails once Google connectors are enabled. In a post onX, on September 12, Eito Miyamura outlines a simple scenario: An attacker sends a calendar invitation seeded with instructions and waits for the target to engage with ChatGPT and ask it to perform an action. ChatGPT then reads the booby-trapped event and follows orders to search Gmail and follow sensitive details. “All you need? The victim’s email address,” Miyamura claims.

In mid-August, OpenAI introduced native Gmail, Google Calendar, and Google Contacts connectors in ChatGPT, initially to Pro users and subsequently to Plus, with release notes stating that the assistant can automatically reference these sources in chat after authorization. That means a casual, “What’s on my calendar today?” can pull data directly from your Google account without you explicitly choosing a source each time.

OpenAI’s help center goes further, spelling out that automatic use is enabled for these Google connectors once enabled, and that you can turn it off in ChatGPT’s settings if you prefer to select sources manually. The same page explains that custom connectors using the Model Context Protocol are intended for developers and are not identified by OpenAI. This is particularly important to note because Miyamura frames the attack in the context of recent MCP support and rapidly growing tool ecosystems.

What’s happening under the hood is indirect prompt injection. The attacker’s instructions are hidden inside data that the assistant is allowed to read — in this case, the text of a calendar event. In August, researchers demonstrated how a compromised invite could steer Google’s Gemini into controlling smart-home devices and leaking information, work that has since been documented in both security write-ups and a paper titled “Invitation Is All You Need.” The technicalities differ by platform, but the core risk is the same once an assistant is permitted to read compromised calendar content.

Ultimately, nothing happens unless you first connect Gmail and Calendar inside ChatGPT, and the assistant’s behavior still depends on the policies and prompts OpenAI applies when it ingests third-party content. Documentation also notes that you can disconnect sources or disable automatic use, which limits opportunities for a compromised event to influence a routine chat.

If you’re concerned, the most effective fix is on the Google side. Change Google Calendar’s “Automatically add invitations” setting so only invitations from known senders or those you accept appear on your calendar, and consider hiding declined events. Google’s support pages walk through those options in detail, and Google Workspace administrators can set safer defaults organization-wide.

The broader takeaway from this isn’t that ChatGPT or Gmail has been “hacked,” but that tool-using AI is unusually susceptible to hostile instructions lurking in the data you let it read. The connectors that make these assistants somewhat useful also expand the attack surface to calendars and inboxes. Until the industry ships stronger, default-on defenses against indirect prompt injection, the safest course of action is to be conservative about which accounts you connect and, in this specific scenario, lock down your calendar so strangers cannot plant surprises.

Follow Tom’s Hardware on Google News, or add us as a preferred source, to get our up-to-date news, analysis, and reviews in your feeds. Make sure to click the Follow button!

Source link

Trusted Editorial content, reviewed by leading industry experts and seasoned editors. Ad Disclosure

Kroll, a financial and risk advisory firm, is facing a class-action suit after a data breach that exposed personal details of creditors tied to FTX, BlockFi and Genesis.

According to the complaint, the breach in August 2023 let malicious actors obtain sensitive data, and that exposure has led to a wave of phishing attempts against creditors.

Allegations Of Negligence

Based on reports, the lawsuit says Kroll relied only on email for claims outreach, which made the verification process vulnerable.

The suit was filed on Tuesday in a US district court by Hall Attorneys on behalf of FTX customer Jacob Repko and other affected creditors.

The complaint claims that email-only contact created a single point of failure, and that the verification system was compromised, causing delays and, in some cases, loss of funds.

Hall Attorneys say the matter is not just about money but about fixing how creditors are contacted going forward.

Nicholas Hall, who leads the firm handling the suit, has told creditors that eligible participants might get monetary compensation and that court rulings could force operational changes at Kroll.

Repeated Breaches Raise Questions

Reports have disclosed that this is not an isolated incident for Kroll. In March, the firm reportedly suffered another breach that exposed client invoicing, accounts payable and email addresses.

Sunil Kavuri, a prominent FTX creditor, posted on X that he has been getting phishing emails on a daily basis, and he shared screenshots showing scams addressed to him by name.

One screenshot in the report shows messages arriving from Aug. 14 through Sunday, and other users replied saying they had seen the same emails.

Total crypto market cap currently at $3.7 trillion. Chart: TradingView

Third Round Of FTX Reimbursement In September

The suit comes as FTX moves ahead with payouts to creditors. The third round of reimbursement is set to start on Sept. 30 and will total nearly $2 billion.

More than $5 billion went out in the second round in May, and in February the plan covered $1.2 billion for users with claims up to $50,000.

The FTX Collapse

FTX’s collapse in November 2022, spearheaded by its ex-CEO Sam Bankman-Fried, rocked the entire crypto market and erased billions of investor value.

Its failure set off a chain reaction that saw prices of digital assets plummet and raise profound doubts about risk management and transparency in the industry.

For most investors, the case was a watershed, underscoring the weaknesses of centralized platforms and stoking demands for a more extensive regulation and protection in crypto.

Featured image from Quartz, chart from TradingView

Editorial Process for bitcoinist is centered on delivering thoroughly researched, accurate, and unbiased content. We uphold strict sourcing standards, and each page undergoes diligent review by our team of top technology experts and seasoned editors. This process ensures the integrity, relevance, and value of our content for our readers.

Source link

Compromised Google Calendar invites can hijack ChatGPT’s Gmail connector and leak emails

Financial Firm Accused Of Daily Scam Emails In Exchange’s Collapse

Allegations Of Negligence

Repeated Breaches Raise Questions

Third Round Of FTX Reimbursement In September

The FTX Collapse