Nationalcioreview

Gemini Zero-Click Flaw Exposes Google Services to Attackers

First seen 10 Dec 2025, 13:46 UTC • Cybersecuritynews

•29.2

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A zero-click vulnerability known as 'GeminiJack' was identified in Google Gemini Enterprise, allowing attackers to access sensitive data from Gmail, Calendar, and Google Docs. This architectural flaw exploited the way AI systems handle shared content, posing significant risks to corporate data security.

How this analysis works

Attack Flow

12 entities, 17 inferred relationships (STIX 2.1).

Technique (2)

Data Breach
Malware

Organization (2)

Google
Noma Labs

Affected Platform (6)

Calendar
Calendars
Docs
Google Docs
Google Gemini Enterprise
Vertex AI

Tool (1)

Gmail

Vulnerability (1)

GeminiJack

Relationships

Gmail exploits GeminiJack
GeminiJack targets Calendar
GeminiJack targets Calendars
GeminiJack targets Docs
GeminiJack targets Google Docs
Data Breach targets Calendar
Data Breach targets Calendars
Data Breach targets Docs
Data Breach targets Google Docs
Malware targets Calendar
Malware targets Calendars
Malware targets Docs
Malware targets Google Docs
GeminiJack related to Google
GeminiJack related to Noma Labs
GeminiJack related to Google Gemini Enterprise
GeminiJack related to Vertex AI

Continue Reading

Google Addresses Eighth Chrome Zero-Day Vulnerability in 2025 New WebKit Zero-Day CVE-2025-14174 Discovered and Exploited Google Chrome Zero-Day Vulnerability CVE-2025-13223 Exploited in the Wild Critical RCE Vulnerability in n8n Affects Over 100K Servers Belarusian Hackers Target Yury Hubarevich with Sophisticated Phishing Attack Google and FBI Disrupt NetNut Proxy Network Linked to 2 Million Devices

Gemini Zero-Click Flaw Exposes Google Services to Attackers

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading