Gemini Voice Assistant Hijacked via Messaging Notifications
2026-06-04T13:24:08Z•29c71756ea1014e389cd24b49c6a6aeccbe6ae19cf819e08bf60e10a7a410210
account-disruptionburst-statisticscisco-unified-cmcredential-phishingcybercrimeespionage-attack','email-compromise','ai-security','observabiltygithub-token-theftgoogle-geminigoogle-homekirkilaw-enforcementmagentomirasvitphp-serializationprivilege-escalationproof-of-conceptrcesmart-homessrfsupply-chainta4922voice-assistantvs-codewordpresszoom
What happened
Multiple high-impact security stories: Researchers show a messaging-notification attack can hijack Google’s Gemini voice assistant to trigger dangerous actions (control Google Home devices, start Zoom calls). A deserialization flaw in the Mirasvit Full Page Cache Warmer extension is being exploited for unauthenticated remote code execution on Magento servers. Cisco warned of an available PoC for a critical Unified CM SSRF vulnerability that can be exploited remotely without authentication. A disclosed VS Code bug enables one-click GitHub token theft (PoC released). Separately, Chinese cyber‑sc
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- 29c71756ea1014e389cd24b49c6a6aeccbe6ae19cf819e08bf60e10a7a410210
- Enrichment time
- 2026-06-04T13:24:08Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.