Your Calendar Invite Just Ordered Cupcakes: The Smart Home Agent Security Gap Nobody's Watching
A Gemini-powered smart home agent misread a dentist appointment invite and ordered cupcakes instead. Not a hypothetical, not a red-team exercise, just a normal calendar entry that got interpreted as a commerce instruction and turned into an actual order. Forkast's writeup uses this alongside the Meta Muse iCloud photo exposure and the DJI Romo token leak to make a simple point: consumer smart home platforms have none of the runtime protection that enterprise agent deployments are starting to get
