logo

Google won’t fix ASCII smuggling attacks in Gemini

ID: ce963f89-992d-5e95-83c5-5a47fe47815b

STIX ID: report--ce963f89-992d-5e95-83c5-5a47fe47815b

Feed Name: Bleeping Computer

Threat Score
50/100

Date Published: 2025-10-07

Date Updated: 2026-07-18

Author: Bill Toulas

...
...

**ASCII smuggling against Google Gemini:** Research by FireTail demonstrates that hidden Unicode characters (ASCII smuggling) can embed invisible instructions in items like Calendar invites and emails, allowing Gemini to be manipulated into revealing information, spoofing organizer identity, or presenting poisoned outputs; the issue is demonstrated in proof-of-concept tests but Google has declined to treat it as a security bug.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.