Gemini 3.5 Flash Cyber: Google’s AI Model for Vulnerability Discovery
A lightweight AI model fine-tuned to find, validate, and patch software vulnerabilities. In tests, it found 55 unique confirmed V8 issues and…
Tag: Gemini
FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
Cybersecurity researchers have uncovered a large-scale campaign dubbed FakeGit, which leverages nearly 7,600 malicious GitHub repositories to distribute the SmartLoader malware. The…
EU Orders Google to Open Android Mic, Camera and Screen to Rival AI Assistants
The European Commission has issued binding specification decisions under the Digital Markets Act, ordering Google to grant rival AI assistants the same…
GitHub Copilot Refuses Harmful Requests in Chat, Then Writes Them in Code
Researchers Abhishek Kumar and Carsten Maple have discovered a novel workflow-level jailbreak method that bypasses safety guardrails in GitHub Copilot. The study,…
AI Agent JADEPUFFER Exploits Langflow RCE to Automate Database Ransomware Attack
Security firm Sysdig has identified what it believes is the first ransomware attack fully orchestrated by an AI agent, dubbed JADEPUFFER. The…
SafeBreach Demonstrates Prompt Injection Attack on Gemini
SafeBreach, a cybersecurity company, demonstrated an indirect prompt injection attack that could hijack Gemini's Android Utilities agent via notification content, which Google…
OpenClaw AI Agent Vulnerable to Code Execution and Data Exfiltration via Hidden Commands and Phishing
Two security teams have demonstrated that OpenClaw, a popular self-hosted AI agent, can be tricked into executing attacker-controlled code or leaking sensitive…
Google Sues Chinese Smishing Network Using Gemini AI for Phishing
Google has filed a lawsuit against a Chinese cybercrime network accused of using its Gemini AI agent to power a phishing-as-a-service (PhaaS)…
Outsider Enterprise: Chinese Phishing-as-a-Service Network
A Chinese cybercrime network operating the Outsider PhaaS platform, using Gemini AI for phishing. Coordinated via Telegram, it includes Developer, Data Broker,…
Outsider Phishing-as-a-Service Kit
A PhaaS kit offering pre-built templates, keystroke logging, and AI integration. Used to create fraudulent websites and launch smishing campaigns.