PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Weaponizing image scaling against production AI systems

blog.trailofbits.com | blog | #ai-security | #prompt-injection | #gemini | #data-exfiltration | #image-scaling-attack | #multimodal-ai | #anamorpher | #image-scaling-attacks | #multimodal | #gemini-cli
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Trail of Bits shows how image-scaling attacks hide prompt injections visible only after downscaling, enabling data exfiltration on Gemini CLI, and releases the open-source Anamorpher tool.
Published
Collected

Related coverage

blog · bughunters.google.com
Mitigating URL-based Exfiltration in Gemini
This post takes a look at how Gemini and other agents created by Google mitigate URL-based data exfiltration attacks.
blog · netspi.com
Understanding Indirect Prompt Injection Attacks in LLM-Integrated Workflows
Indirect prompt injection hides malicious instructions in content LLMs later read—email footers, PDFs, web pages. Real Microsoft 365 Copilot attacks make defense in depth and AI monitoring essential.
blog · blog.trailofbits.com
Lack of isolation in agentic browsers resurfaces old vulnerabilities
Trail of Bits exploited missing isolation in agentic browsers to enable XSS/CSRF-like attacks, from false information to cross-site data leaks, resurfacing decades-old web vulnerability patterns.
blog · blog.trailofbits.com
How MCP servers can steal your conversation history
Malicious MCP servers can inject trigger phrases into tool descriptions to exfiltrate entire conversation histories and steal sensitive credentials and IP.
blog · bughunters.google.com
Bug Hunting on Gemini Spark
Google's Bug Hunters program outlines how to approach security testing on Gemini Spark, a persistent agent in the Gemini App, focusing on high-impact bugs in this new agentic paradigm.
blog · portswigger.net
Using recursive grep for harvesting data
Burp Intruder's 'recursive grep' builds each payload from the previous response, ideal for error-based SQL injection that returns one value at a time — harvesting a whole table without a script.
Back