"security" means many different things. "Security" in the sense of e2ee – sure, that's fraught with e-mail.
But when we're talking "AI agents", that's a whole other level. First zero-click prompt injection attack against an AI agent integrated with e-mail has already been found:
https://fortune.com/2025/06/11/microsoft-copilot-vulnerability-ai-agents-echoleak-hacking/
It just happened to hit Copilot, not Gemini. So far.
Sebastian (npub15m2…gezc) xlenka (npub1f78…2vp5) 🦜 Drew DeVault's blog (npub1qnu…tgsk)
Michał "rysiek" Woźniak · 🇺🇦
npub1af…q5gp4
2026-01-09 20:18:51 GMT
in reply to nevent1q…g0hm
Author Public Key
npub1afml2kzwamqxppl50207sf5jwgl3l6ugn6hnuwugtxt7ctnhdtkqjq5gp4Seen on
wss://relay.momostr.pinkPublished at
2026-01-09 20:18:51 GMTEvent JSON
{
"id": "ce83c63586c2b8164fb5c3f414efb6eab6c9f2822548d548ff6d28ec1dcdbe96",
"pubkey": "ea77f5584eeec06087f47a9fe82692723f1feb889eaf3e3b885997ec2e776aec",
"created_at": 1767989931,
"kind": 1,
"tags": [
[
"p",
"efe8e5fd2c91917ec836513921a1de2e6060164226eb1a21847d1c33b5b26cb7"
],
[
"proxy",
"https://mstdn.social/@rysiek/115866988172452260",
"web"
],
[
"e",
"fb672246346093c5c0b9536926cbd83a884206d943c9705cd45e73ab5c037660",
"",
"reply",
"efe8e5fd2c91917ec836513921a1de2e6060164226eb1a21847d1c33b5b26cb7"
],
[
"p",
"04f8e2c47d9918fd9b01f6a85ff7787abda089df3fbf23981ccb164d8969bb47"
],
[
"e",
"de58713580204e81345bcedcdea9cfcdab39c279fc5bbec9fdf7e5c268485a9b",
"",
"root",
"ea77f5584eeec06087f47a9fe82692723f1feb889eaf3e3b885997ec2e776aec"
],
[
"p",
"a6d4761297487d1feb60351ffd02855217723dd51a037ec0c8840a5eb99f0775"
],
[
"p",
"ea77f5584eeec06087f47a9fe82692723f1feb889eaf3e3b885997ec2e776aec"
],
[
"p",
"4f8eb949285d8c7d9cc900a682c3c35274f083f716edcbb98e40f40b2d8cc54e"
],
[
"proxy",
"https://mstdn.social/users/rysiek/statuses/115866988172452260",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://mstdn.social/users/rysiek/statuses/115866988172452260",
"pink.momostr"
],
[
"-"
]
],
"content": "\"security\" means many different things. \"Security\" in the sense of e2ee – sure, that's fraught with e-mail.\n\nBut when we're talking \"AI agents\", that's a whole other level. First zero-click prompt injection attack against an AI agent integrated with e-mail has already been found:\nhttps://fortune.com/2025/06/11/microsoft-copilot-vulnerability-ai-agents-echoleak-hacking/\n\nIt just happened to hit Copilot, not Gemini. So far.\n\nnostr:npub15m28vy5hfp73l6mqx50l6q592gthy0w4rgphasxgss99awvlqa6sqngezc nostr:npub1f78tjjfgtkx8m8xfqzng9s7r2f60pqlhzmkuhwvwgr6qktvvc48q8p2vp5 nostr:npub1qnuw93ranyv0mxcp7659lamc0276pzwl87lj8xquevtymztfhdrspvtgsk",
"sig": "e24ff12917f1d1d4977fb39f1ff77b445c0432feca8ea6f79132b1a69a60570bf06579b3c04075062010c2f825f5b105250e3393019321b446bca7adbeba3112"
}