Google won’t fix new ASCII smuggling attack in Gemini
ID: 292013df-db1b-5b06-9972-8b92804d4534
STIX ID: report--292013df-db1b-5b06-9972-8b92804d4534
Feed Name: Bleeping Computer
Threat Score
**Google won’t fix new ASCII smuggling attack in Gemini** — A FireTail researcher demonstrated that ASCII smuggling (using invisible Unicode characters) can hide instructions in Google Workspace artifacts (calendar invites, emails) and web content to manipulate Gemini, enabling identity spoofing, hidden meeting content, data extraction from inboxes, and poisoned model outputs; Google considers it social engineering and has not patched it.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.