TLDR InfoSec · MISCELLANEOUS
HONEY, I SHRUNK THE IMAGE AND NOW I'M PWNED
Summary from the TLDR InfoSec newsletter
Security researchers found that Google Gemini-powered tools can be deceived by hidden prompts embedded in images, exploiting image scaling for prompt injection. This trick can cause AI to leak data or act out of bounds. Google says it's not a default vulnerability, but experts urge stronger AI system defenses and user previews.