Free tools Windows power users keep installed
One-click scans. No signup required.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
A calendar invitation cannot directly control a smart home. But if an AI assistant can read invitations and also operate connected devices, malicious text in an invite could try to steer the assistant into taking an action it is authorized to perform. The cupcake scenario in this headline is hypothetical, not a reported incident; the underlying risk has been demonstrated in research on AI assistants.
How could an invitation influence an AI assistant?
The risk arises when an assistant combines two capabilities: reading content from outside sources and taking actions through connected apps or devices. An attacker may try to place instructions in an invitation that the assistant later processes during an ordinary task, such as reviewing a schedule. If the assistant treats those instructions as commands rather than untrusted content, it may attempt to use its available tools.
- Untrusted content enters the workflow. An invitation, email, shared document, or other external content contains text intended to manipulate the assistant.
- The assistant processes it. While performing a legitimate task, the model encounters that text. NIST calls this kind of attack agent hijacking through indirect prompt injection: malicious instructions are placed in data an agent may ingest, taking advantage of weak separation between trusted instructions and untrusted data. NIST CAISI described the threat on January 17, 2025.
- Connected tools determine what can happen next. If the assistant has permission to change a calendar, send messages, or control devices, it may have authority to attempt those actions. The model’s interpretation matters, but so do the permissions and safeguards around its tools.
An invitation alone does not grant access to a device. The concern is the combination of adversarial content, an assistant that acts on it, and permissions broad enough to make a consequential action possible.
What has research demonstrated—and what does it not prove?
Fourteen attack scenarios across assistant experiences
In an August 2025 paper, Ben Nassi, Stav Cohen, and Or Yair reported 14 promptware attack scenarios across five threat classes, examined against Gemini web, mobile, and Google Assistant experiences. The reported consequences included deleting calendar events, manipulating home appliances, exposing email or meeting information, and phishing. These were demonstrations in the configurations the authors examined, not evidence that every assistant or smart home is vulnerable. Read the paper and its stated scope.
#1 Best Overall
- Outdoor 4 is our most affordable wireless smart security camera yet, offering up to two-year battery life for around-the-clock peace of mind. Local storage not included with Sync Module Core.
- See and speak from the Blink app — Experience 1080p HD live view, infrared night vision, and crisp two-way audio.
- Two-year battery life — Set up in minutes and get up to two years of power with the included AA Energizer lithium batteries and a Blink Sync Module Core.
- Enhanced motion detection — Be alerted to motion faster from your smartphone with dual-zone, enhanced motion detection.
- Person detection — Get alerts when a person is detected with embedded computer vision (CV) as part of an optional Blink Subscription Plan (sold separately).
How to interpret the 73% figure
The authors rated 73% of the analyzed threats High-Critical under their threat assessment. That percentage describes the set of threats assessed in the paper; it is not a share of users, deployed assistants, homes, or attacks observed in the wild.
Mitigations do not establish that the risk is gone
The authors said they disclosed their findings to Google and that Google deployed dedicated mitigations. That is relevant context, but it does not establish that all related risks have been eliminated. The sources cited here do not establish a population-level rate for calendar-to-smart-home agent hijacking.
Why is this a security-boundary problem?
A conventional calendar entry is data. A connected assistant may also be able to act, which creates a boundary problem: text from an outside source can influence a system that has authority over other services. NIST has framed agent security as both a software-security issue and a challenge created when models are coupled to tools that can affect real systems. Its January 2026 request for information asks about risks including adversarial data, insecure models, and harmful actions even without adversarial inputs. NIST CAISI’s announcement explains the scope of that request.
Rank #2
- Outdoor 4 is our most affordable wireless smart security camera yet, offering up to two-year battery life for around-the-clock peace of mind. Local storage not included with Sync Module Core.
- See and speak from the Blink app — Experience 1080p HD live view, infrared night vision, and crisp two-way audio.
- Two-year battery life — Set up in minutes and get up to two years of power with the included AA Energizer lithium batteries and a Blink Sync Module Core.
- Enhanced motion detection — Be alerted to motion faster from your smartphone with dual-zone, enhanced motion detection.
- Person detection — Get alerts when a person is detected with embedded computer vision (CV) as part of an optional Blink Subscription Plan (sold separately).
Smart-home devices have their own security considerations, but securing a device does not by itself prevent an assistant from being manipulated into issuing an authorized command. NIST’s October 2019 initial public draft on consumer home IoT products reviewed product categories such as lights, cameras, doorbells, plugs, and thermostats. It is background on device and ecosystem security—not an assessment of current models or a safeguard against prompt injection.
What can households do now?
These steps apply general security guidance to a household setup; they have not been experimentally validated as a package by the cited attack study.
- Review connected accounts and devices. Check which calendars, email accounts, apps, and smart-home devices the assistant can reach, and remove access it does not need.
- Separate reading from changing where possible. Prefer read-only access for calendar content when the assistant does not need to edit events, and avoid connecting calendar access to device controls unnecessarily.
- Require confirmation for consequential actions. Use action-specific approval before purchases, unlocking doors, changing heating, or other actions with financial, privacy, or physical consequences.
- Check activity after an unexpected action. Review the assistant’s, account’s, and device’s available history, then revoke questionable access or credentials and investigate the event through the relevant service.
These measures reduce the authority available to a manipulated assistant and make unexpected actions easier to notice; they do not guarantee that an attack will fail.
Rank #3
- ENDLESS POWER FROM SOLAR ENERGY: Just 45 minutes of direct sunlight powers the camera for a full day of use, while the built-in battery lasts up to 180 days on a single charge during cloudy days. Solar charging requires temperatures above 32°F.△
- EASY WIRE-FREE INSTALLATION: Place the Tapo SolarCam C402 KIT where you need it without relying on nearby outlets. Install the camera and solar panel together or separately using the included 13 ft cable for flexible placement.
- PRIORITIZE WHAT MATTERS: Set activity zones to monitor specific areas for motion or people. Free person and motion detection helps reduce unwanted alerts and notifies you when activity is detected.
- VERSATILE VIDEO STORAGE: Store footage locally via a microSD card (up to 512GB)* or via cloud with a Tapo Care cloud subscription. Tailor your security to suit your needs, whether indoor or outdoor, you have the storage option you need.
- FULL-COLOR 1080P, DAY AND NIGHT: See clearly in low light with a large-aperture lens and built-in spotlights. Capture full-color night vision up to 30 ft away to monitor for possible intruders or motion.
How should you compare assistant and smart-home setups?
There is no vendor ranking established by the cited sources. When assessing a setup, compare the boundaries and controls that determine what an assistant can read, do, and report.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware match| What to check | Question to ask | Safer signal |
|---|---|---|
| External content | Which calendars, emails, files, or websites can the assistant ingest? | Access is limited to the sources needed for the task. |
| Integration permissions | Can an integration only read information, or can it change or send it? | Read-only access is used where writing is unnecessary. |
| Reachable devices and actions | Which devices and high-impact controls are available to the assistant? | Unnecessary devices and consequential controls are not exposed. |
| Approval controls | Does a person approve the specific action before it happens? | Approval is tied to the exact action, not a broad or reusable authorization. |
| Activity records | Can you see what the assistant and integrations did? | Logs make actions and relevant tool calls reviewable. |
| Security testing and updates | Does the provider test indirect prompt injection and update its mitigations? | The provider describes ongoing testing and mitigation, rather than relying only on a model’s instructions. |
These comparison questions reflect guidance from OWASP’s AI Agent Security Cheat Sheet and joint guidance announced by CISA and partner agencies on May 1, 2026. The agencies emphasize limiting autonomy and broad access, using layered defenses and strong identity management, maintaining oversight, threat-modeling deployments, monitoring, and conducting regular security assessments.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What should developers and organizations build into an agent?
Permissions and independent checks matter because an assistant’s answer is not a security policy. OWASP recommends treating external data—including emails and API responses—as untrusted, distinguishing data from instructions, and validating agent outputs. For consequential actions, it recommends separating the decision from execution so a policy or execution component can independently check scope, privilege, and approval state. Approval should apply to the exact action being authorized.
Rank #4
- 【2K Ultra HD & Full Color Night Vision - 4 Cam Kit】Upgrade your home security with this 4 pack security cameras wireless outdoor system. Delivering 2K 3MP ultra-clear live video, these cameras for home security feature advanced color night vision and infrared modes, ensuring vivid details even in pitch black. Equipped with a 3.3mm focal length lens, this porch camera set provides a wide-angle view for your front door, backyard, garage, or driveway. See every detail in full color and protect your property with the ultimate outdoor camera wireless solution. (*Not support 5GHz WiFi)
- 【Wire-Free Battery Powered & Easy 3-Minute Setup】Experience a truly wireless security system with no messy cables. This rechargeable battery operated camera features an exceptional battery life, providing 1-6 months of standby time for home security system. and supporting up to 3,000+ motion triggers on a single charge. With a quick charging time of 6-8 hours, it ensures long-term performance for indoor pet/baby monitoring or outdoor garden farm security. Portable and easy to install, this WiFi camera can be moved anywhere, from your apartment hallway to a remote warehouse, providing wireless monitoring.(*Only work with 2.4GHz WiFi)
- 【Smart AI PIR Motion Detection & Instant Mobile Alerts】 Never miss a moment with smart PIR motion detection and AI cloud analysis. This IP camera accurately triggers instant alerts to your cell phone when movement is sensed, acting as a reliable motion sensor camera. Customize your motion alerts to monitor specific zones like your patio, office, or store. As a top-rated surveillance camera, it ensures real-time notifications are pushed via the remote smartphone app, keeping you connected to your home security no matter where you are.
- 【Two-Way Talk & Intelligent Siren Alarm System】This WiFi camera features a high-fidelity built-in microphone and speaker for seamless two-way audio. Use the remote access app to speak with delivery drivers or warn off intruders directly from your phone. For active deterrence, the intelligent alarm triggers flashing white lights and a siren to drive away unwanted visitors. Whether it's a house camera for greeting guests or a security camera outdoor for catching package thieves, the real-time intercom and live view provide peace of mind.
- 【IP65 Weatherproof & Flexible Dual Storage Modes】Secure your footage with dual storage options: insert memory card for free local storage, or opt for our encrypted cloud service. New users receive a 7-day free trial of advanced AI features and cloud storage. This IP65 waterproof wireless camera is a rugged weatherproof camera designed to withstand rain, snow, and extreme heat, making it the perfect outside camera for house security. Protect your yard, deck, or pool area even chicken coop with this durable battery camera that keeps your home security intact year-round.(*Only 2.4GHz WiFi supported)
Security testing should include attempts to override instructions, misuse tools, escalate privileges, exfiltrate data, and bypass approval. Monitoring and regular assessments help identify failures that were not caught before deployment. These controls limit the ways an agent can turn manipulated text into an action; none should be treated as a guarantee.
NIST’s February 2026 announcement of an AI Agent Standards Initiative includes work on agent security and identity, reflecting live standards questions as agents interact with external systems. The announcement is not evidence that a universal, finalized agent-security standard is already in place. See NIST’s announcement.
Recommended Free Tools
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
