Gemini Voice Assistant Hijacked via Messaging Notifications

2026-06-05

SafeBreach's Fake Context Alignment attack abused WhatsApp, Slack, and SMS notifications to silently inject hidden instructions that Gemini processes but never reads aloud, letting attackers control Google Home devices, launch Zoom calls, spoof trusted contacts, and poison the assistant's long-term memory before Google patched it in mid-November 2025 with classifier improvements.