Tag: Google Gemini

WhatsApp, Slack Notifications Could Hijack Google Gemini on Android
News

WhatsApp, Slack Notifications Could Hijack Google Gemini on Android

Google Gemini's voice assistant on Android could have been taken over by a single poisoned notification from WhatsApp, Slack, SMS, Signal, Instagram, or Messenger, causing it to open a victim's connected windows, pretend to be a message from their boss, force the phone into a Zoom call, or subtly contaminate its long-term memory. It is not necessary to have any malicious apps on the phone. All the assistant needed to do was handle a hostile notification as helpful context. The study, released by Or Yair of SafeBreach, comes after the team's previous "Invitation Is All You Need" work, which used malicious Google Calendar invites to carry off similar scams. Google then strengthened Gemini's defenses against indirect quick injection. Yair managed to get past the new barriers. There ...
Google Gemini flaw hijacks email summaries for phishing
News

Google Gemini flaw hijacks email summaries for phishing

Without the use of attachments or direct links, Google Gemini for Workspace can be used to create email summaries that look authentic but contain malicious instructions or warnings that point users to phishing websites. This type of attack makes use of indirect prompt injections, which are concealed within emails and that Gemini complies with while creating the message summary. The method is still effective even though similar quick assaults have been documented since 2024 and security measures have been put in place to prevent deceptive answers. Through 0din, Mozilla's bug bounty program for generative AI tools, researcher Marco Figueroa, GenAI Bug Bounty Programs Manager at Mozilla, revealed a prompt-injection attack on Google's Gemini model. Making an email with an invisible G...
Google says it’s focusing on privacy with Gemini AI on Android
News

Google says it’s focusing on privacy with Gemini AI on Android

According to Google, it is integrating AI features on Android phones with a privacy-conscious mindset, enforcing end-to-end protection to safeguard data in transit while retaining the most sensitive data locally on the device. The data that is processed by Google's cloud infrastructure is safeguarded by strict monitoring of unauthorized access, access limits, and cutting edge encryption. Google created Gemini, a new AI assistant that was once known as "Bard," to work in unison with Android devices and aid users with a range of professional and personal tasks read more about Google says it's focusing on privacy with Gemini AI on Android. Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, ...