Hackers could use poisoned WhatsApp and Slack notifications to take over your Google Gemini – and make it work on their behalf

Prompt injection works on Android notifications, as well, and could have been used for a myriad of things.