TLDR InfoSec · MISCELLANEOUS

HONEY, I SHRUNK THE IMAGE AND NOW I'M PWNED

theregister.com4 min read

Summary from the TLDR InfoSec newsletter

Security researchers found that Google Gemini-powered tools can be deceived by hidden prompts embedded in images, exploiting image scaling for prompt injection. This trick can cause AI to leak data or act out of bounds. Google says it's not a default vulnerability, but experts urge stronger AI system defenses and user previews.