--- title: Did You Just Get a Calendar Invite from a Stranger? It Might Be a Prompt Injection description: Beware calendar invites from unknown senders—they could be prompt injections compromising your AI agents. Learn how to protect your systems from these zero-click threats. image: https://smarter.smartservices.com/hubfs/AI-Generated%20Media/Images/The%20image%20features%20a%20sleek%20modern%20office%20environment%20with%20a%20large%20desk%20a%20computer%20displaying%20a%20digital%20calendar%20and%20various%20office%20supplies%20neatly%20arranged%20The%20calendar%20on%20the%20screen%20is%20highlighted%20showing%20an%20unexpected%20calendar%20invite%20from%20an%20unknow-1.png --- [Skip to content](https://smarter.smartservices.com/blog/did-you-just-get-a-calendar-invite-from-a-stranger-it-might-be-a-prompt-injection#main-content) ![SMART IT Services, Inc.](https://smarter.smartservices.com/hs-fs/hubfs/SMART%20IT%20Services%20-%20HLogo%201200x225.png?width=1200&height=225&name=SMART%20IT%20Services%20-%20HLogo%201200x225.png)Homepage - [Learn How to Protect Your Agency!](https://smarter.smartservices.com/seurit-security-solutions-insurance-agency-protection-free-consultation) [Get started](https://smarter.smartservices.com/seurit-security-solutions-insurance-agency-protection-free-consultation) - [Learn How to Protect Your Agency!](https://smarter.smartservices.com/seurit-security-solutions-insurance-agency-protection-free-consultation) [Get started](https://smarter.smartservices.com/seurit-security-solutions-insurance-agency-protection-free-consultation) ![](https://smarter.smartservices.com/hs-fs/hubfs/AI-Generated%20Media/Images/The%20image%20features%20a%20sleek%20modern%20office%20environment%20with%20a%20large%20desk%20a%20computer%20displaying%20a%20digital%20calendar%20and%20various%20office%20supplies%20neatly%20arranged%20The%20calendar%20on%20the%20screen%20is%20highlighted%20showing%20an%20unexpected%20calendar%20invite%20from%20an%20unknow-1.png?width=1536&height=1024&name=The%20image%20features%20a%20sleek%20modern%20office%20environment%20with%20a%20large%20desk%20a%20computer%20displaying%20a%20digital%20calendar%20and%20various%20office%20supplies%20neatly%20arranged%20The%20calendar%20on%20the%20screen%20is%20highlighted%20showing%20an%20unexpected%20calendar%20invite%20from%20an%20unknow-1.png) Independent Insurance Agent Cybersecurity AI # Did You Just Get a Calendar Invite from a Stranger? It Might Be a Prompt Injection ![Jerry Fetty](https://7528315.fs1.hubspotusercontent-na1.net/hub/7528315/hubfs/raw_assets/public/mV0_d-cms-elevate-theme_hubspot/elevate/images/avatar-placeholder.jpg?width=48&height=48&name=avatar-placeholder.jpg) Jerry Fetty August 19, 2025 Did You Just Get a Calendar Invite from a Stranger? It Might Be a Prompt Injection 1:15 **Have you received a calendar invite lately from someone you never booked with?** That “meeting” could be a **prompt‑injection** booby trap. Researchers just showed you can hide malicious instructions inside a Google Calendar event so that when Gemini summarizes your schedule, it follows those hidden prompts—kicking off actions and even leaking data. Zero clicks required. [WIRED](https://www.wired.com/story/google-gemini-calendar-invite-hijack-smart-home?utm_source=chatgpt.com)[SafeBreach](https://www.safebreach.com/blog/invitation-is-all-you-need-hacking-gemini/?utm_source=chatgpt.com) At the same time, we’re seeing **zero‑click compromises of enterprise AI agents** (ChatGPT with Connectors, Copilot, etc.). A single “poisoned” document can make an agent pull data from connected apps and smuggle it out in a harmless‑looking image URL. Again: no user action. [WIRED](https://www.wired.com/story/poisoned-document-could-leak-secret-data-chatgpt?utm_source=chatgpt.com)[CSO Online](https://www.csoonline.com/article/4036868/black-hat-researchers-demonstrate-zero-click-prompt-injection-attacks-in-popular-ai-agents.html?utm_source=chatgpt.com) Here’s how I’m handling it with my team—immediately: 1. **Treat inbound content as untrusted.** Docs, emails, tickets, calendar—all of it. 2. **Clamp agent permissions.** Least‑privilege scopes, block unknown domains, require approvals for sensitive actions. 3. **Log & alert.** Track every tool call and outbound link; flag unusual reads or mass access. Bottom line: AI agents are amazing accelerators—but untrusted content is now a **control plane**. Secure them like you would any powerful integration. *#GenAISecurity #PromptInjection #ZeroClick #AIagents #Cybersecurity #AppSec* ## Share this post [mailto:https%3A%2F%2Fsmarter.smartservices.com%2Fblog%2Fdid-you-just-get-a-calendar-invite-from-a-stranger-it-might-be-a-prompt-injection](mailto:https%3A%2F%2Fsmarter.smartservices.com%2Fblog%2Fdid-you-just-get-a-calendar-invite-from-a-stranger-it-might-be-a-prompt-injection) ## Keep reading ### [Protecting Your Independent Insurance Agency from Ransomware](https://smarter.smartservices.com/blog/protecting-your-independent-insurance-agency-from-ransomware) [![SMART IT Services, Inc.](https://smarter.smartservices.com/hs-fs/hubfs/SMART%20IT%20Services%20-%20HLogo%201200x225.png?width=1200&height=225&name=SMART%20IT%20Services%20-%20HLogo%201200x225.png "SMART IT Services, Inc.")](http://SMARTservices.com) - [Learn How to Protect Your Agency!](https://smarter.smartservices.com/seurit-security-solutions-insurance-agency-protection-free-consultation) --- Privacy Policy · Legal · © 2025 Smart I.T. Services, Inc.. All rights reserved. ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Jerry Fetty", "url" : "https://smarter.smartservices.com/blog/author/jerry-fetty" }, "dateModified" : "2025-08-19T15:51:20.670Z", "datePublished" : "2025-08-19T14:30:00.000Z", "headline" : "Did You Just Get a Calendar Invite from a Stranger? It Might Be a Prompt Injection", "image" : [ "https://smarter.smartservices.com/hubfs/AI-Generated%20Media/Images/The%20image%20features%20a%20sleek%20modern%20office%20environment%20with%20a%20large%20desk%20a%20computer%20displaying%20a%20digital%20calendar%20and%20various%20office%20supplies%20neatly%20arranged%20The%20calendar%20on%20the%20screen%20is%20highlighted%20showing%20an%20unexpected%20calendar%20invite%20from%20an%20unknow-1.png" ], "mainEntityOfPage" : { "@id" : "https://smarter.smartservices.com/blog/did-you-just-get-a-calendar-invite-from-a-stranger-it-might-be-a-prompt-injection", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://smarter.smartservices.com/hubfs/SMART%20IT%20Services%20-%20HLogo%201200x225.png" }, "name" : "Smart I.T. Services, Inc." } } ```