Google won’t fix ASCII smuggling attacks in Gemini
ID: ce963f89-992d-5e95-83c5-5a47fe47815b
STIX ID: report--ce963f89-992d-5e95-83c5-5a47fe47815b
Feed Name: Bleeping Computer
Threat Score
**ASCII smuggling against Google Gemini:** Research by FireTail demonstrates that hidden Unicode characters (ASCII smuggling) can embed invisible instructions in items like Calendar invites and emails, allowing Gemini to be manipulated into revealing information, spoofing organizer identity, or presenting poisoned outputs; the issue is demonstrated in proof-of-concept tests but Google has declined to treat it as a security bug.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
