Android Notifications Could Exploit Google Gemini Vulnerabilities
TL;DR. Bad actors could hijack Google Gemini on Android through notifications from apps like WhatsApp or Slack. - This vulnerability allows malicious prompts to bypass safety measures via system notifications. - Attackers could force Gemini to perform harmful actions or extract sensitive user data. - Google addresses the issue in its January 2024 security updates for Android.
- Google Gemini on Android is vulnerable to notification-based attacks.
- Bypasses safety mechanisms, allowing malicious prompt injection.
- Attackers can leverage this to extract data or perform harmful tasks.
- Google's January 2024 Android security update mitigates this risk.
Sources
- WhatsApp, Slack Notifications Could Hijack Google Gemini on Android — thehackernews.com