nixCraft 🐧 @nixCraft@mastodon.social
Public

Are you using AI to summary emails with Google gmail and workspace?
Google Gemini Bug Turns Gmail Summaries into Phishing Attack: No links or attachments are required; the attack relies on crafted HTML / CSS inside the email body. Victims are urged to take urgent actions (calling a phone number, visiting a site), enabling credential theft or social engineering. That is all.

More
0din.ai/blog/phishing-for-gemi &

pcmag.com/news/google-gemini-b

A security researcher discovered a way to trick the AI-generated email summary feature into promoting malicious instructions to unsuspecting users. The screenshot shows how one can trick with a prompt-injection vulnerability in Google Gemini for Workspace so user can call given number or visit website (on the right side).
0
7
0

If you have a fediverse account, you can quote this note from your own instance. Search https://mastodon.social/users/nixCraft/statuses/114852829363078529 on your instance and quote it. (Note that quoting is not supported in Mastodon.)