Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Gemini Enterprise zero-click indirect prompt injection security flaw

Vulnerability
First reported
Last updated
Happening score
H score 1
1 unique sources, 1 articles

Summary

Hide ▲

Google Gemini Enterprise and Vertex AI Search were patched after researchers found a zero-click indirect prompt injection flaw that could exfiltrate sensitive corporate information from connected Google Workspace sources. The issue, dubbed GeminiJack, let attacker-controlled content poison routine searches without a click or security-control trigger. Google said the weakness was fixed after it was reported in June 2025.

Related Happenings

Google Dialogflow CX Code Blocks shared-runtime isolation security flaw

Vulnerability
H score32 First: 07.07.2026 19:37 Last: 07.07.2026 19:37 Sources 1

About this happening: Google Dialogflow CX Code Blocks had a shared-runtime isolation flaw that could let one editable agent affect other Code Block-enabled agents in the same Google Cloud pr...

Open Happening

Search for perplexity ai malicious Chrome extension

Malware Activity
H score29 First: 29.06.2026 21:40 Last: 29.06.2026 21:40 Sources 1

About this happening: A malicious Chrome extension named Search for perplexity ai impersonated Perplexity AI while intercepting search traffic and collecting browsing information th...

Open Happening

Skills.sh scanner blind spot for externally linked AI agent skills

Security Tool/Service
H score22 First: 23.06.2026 18:16 Last: 23.06.2026 18:16 Sources 1

About this happening: Security scanners for AI agent skills, including those wired into skills.sh, cleared a fake skill that hid its real payload behind stitch-design.ai, exposing a vetting...

Open Happening

Google Gemini on Android notification-injection bypass using Fake Context Alignment

Technical Analysis
H score16 First: 03.06.2026 22:11 Last: 03.06.2026 22:11 Sources 1

About this happening: Researchers found a notification-based prompt-injection bypass in Google Gemini on Android that could turn hostile notification text into unauthorized assistant actions*...

Open Happening

Gemini CLI workspace trust RCE flaw

Vulnerability
H score39 First: 30.04.2026 10:07 Last: 30.04.2026 10:07 Sources 1

About this happening: Google has fixed Gemini CLI and google-github-actions/run-gemini-cli flaws that let untrusted workspace content trigger arbitrary commands on the host in CI/head...

Open Happening

Timeline

  1. 10.12.2025 14:05 2 articles · 7mo ago

    GeminiJack disclosed and patched in Gemini Enterprise

    Initial Disclosure

    Researchers at Noma Security discovered GeminiJack in Google Gemini Enterprise and Vertex AI Search in June 2025 and reported it to Google the same day. Google confirmed receipt in August and worked with the researchers on a fix, Noma Security published a proof-of-concept exploit on December 8, 2025, and Google had deployed updates by December 10, 2025 that changed how Gemini Enterprise and Vertex AI Search interact with their underlying retrieval and indexing systems and fully separated Vertex AI Search from Gemini Enterprise.

    Show sources
    Open in new tab