Mmastodon TechnologyCybersecurity first seen 12 h ago, last 12 h ago, peak #12

Google tests wider file access for Gemini on macOS

Original: 🤖 Google is testing "additional sandbox options" in Gemini Desktop for macOS: the AI could read, create, modify or delet

Google is testing new 'additional sandbox options' in the Gemini desktop app for macOS that would let the AI assistant read, create, modify or delete files anywhere on a user's machine, and control apps like Mail, Safari and Messages without asking for confirmation on each action. Security observers warn this dramatically expands the potential damage of prompt-injection attacks, since a manipulated agent could act across the whole system.

Why now: Security researchers are alarmed that giving an AI agent broad, unconfirmed control over files and apps enlarges the attack surface for prompt-injection exploits.

GoogleGeminimacOS

Open on mastodon →

Evidence

• 🤖 Google is testing "additional sandbox options" in Gemini Desktop for macOS: the AI could read, create, modify or delete files anywhere on the machine, drive Mail/Safari/Messages and act without per-action confirmation. That widens the prompt-injection blast radius for agentic… · cloud@infosec.exchange · 2

API: https://socialmediatrends-api.osmike.com/v1/trends/972190