'TRIFECTA' OF GEMINI FLAWS TURN AI INTO ATTACK VEHICLE

Summary from the TLDR InfoSec newsletter

Google's Gemini AI suite had three critical flaws: Search Personalization enabled injection and data leaks via Chrome history, Cloud Assist allowed prompt manipulation through raw logs, and the Browsing Tool exposed saved data through a side channel. All vulnerabilities could be exploited for data exfiltration. Google has now fixed them.