Google Changes Gmail—New Gemini Attack Warning

InnovationCybersecurityGoogle Changes Gmail—New Gemini Attack WarningByZak Doffman,Contributor.Forbes contributors publish independent expert analyses and insights. Zak Doffman writes about cybersecurity, surveillance and privacy.Follow AuthorApr 26, 2026, 04:48am EDTApr 26, 2026, 05:06am EDT--:-- / --:--This voice experience is generated by AI. Learn more.This voice experience is generated by AI. Learn more.New upgrade, new warning.dpa/picture alliance via Getty ImagesGoogle has changed Gmail, expanding Gemini to millions of users — just as it warns that this kind of AI upgrade opens the door to an “evolving playground” of sophisticated new attacks. Gemini now sits between you and your emails. That may be a major convenience, but it also turns your inbox into a new attack surface.Gmail users can now “break through information overload to see what matters most,” Google says. “AI Overviews in Gmail search turns information into answers without the digging." Put simply, when you search for information, "Gemini synthesizes various email threads to create a concise summary of key points.”ForbesHow To Keep Your Texts After Samsung Shuts Down MessagingBy Zak DoffmanThat announcement came on Apr. 22, but on Apr. 2, Google warned that “indirect prompt injection (IPI) is an evolving threat vector targeting users of complex AI applications with multiple data sources, such as Workspace with Gemini.” While IPI is used to “influence the behavior” of LLMs to execute attacks, it can also be used to influence the behavior of users themselves.Imagine an AI summary of your inbox that includes instructions to click links, install software or even approve transactions. These are not instructions you’ve read — but hidden prompts embedded in emails, designed to influence the AI generating your summary and, in turn, the actions you then take.MORE FOR YOUGmail upgrade — summaries coming soon to your inbox.Google“IPI is not the kind of technical problem you 'solve’ and move o...