Claude desktop extension can be hijacked to send out malware by a simple Google Calendar event

AI assistants apparently can’t distinguish between instructions and data, and that is at the center of many zero-click prompt injection attacks.