<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>RuntimeRebel — #Google Gemini</title><description>Cybersecurity articles tagged #Google Gemini on RuntimeRebel.</description><link>https://runtimerebel.com</link><item><title>Encrypted Prompts Bypass AI Safety Guardrails in Grok and Gemini</title><link>https://runtimerebel.com/blog/encrypted-prompts-bypass-ai-safety-guardrails-in-grok-and-gemini</link><guid isPermaLink="true">https://runtimerebel.com/blog/encrypted-prompts-bypass-ai-safety-guardrails-in-grok-and-gemini</guid><description>Researchers discover cryptographic context injection, a novel technique bypassing AI safety filters in xAI Grok and Google Gemini using encryption.</description><pubDate>Sat, 22 Aug 2026 08:19:25 GMT</pubDate><category>Artificial Intelligence</category><category>Prompt Injection</category><category>Zero-Day</category><category>Data Breach</category><category>Google Gemini</category></item><item><title>Google Gemini Hijack: Command Injection via Messaging Notifications</title><link>https://runtimerebel.com/blog/google-gemini-hijack-command-injection-via-messaging-notifications</link><guid isPermaLink="true">https://runtimerebel.com/blog/google-gemini-hijack-command-injection-via-messaging-notifications</guid><description>Researchers demonstrate how Google Gemini voice assistant can be hijacked via malicious messaging notifications to control smart homes and start video calls.</description><pubDate>Thu, 04 Jun 2026 13:16:24 GMT</pubDate><category>Google Gemini</category><category>Prompt Injection</category><category>Voice Assistant</category><category>Iot Security</category><category>Android Security</category></item><item><title>Google Gemini Hijacked on Android via Poisoned Notifications</title><link>https://runtimerebel.com/blog/google-gemini-hijacked-on-android-via-poisoned-notifications</link><guid isPermaLink="true">https://runtimerebel.com/blog/google-gemini-hijacked-on-android-via-poisoned-notifications</guid><description>Researchers demonstrate how WhatsApp and Slack notifications can trigger indirect prompt injection in Google Gemini, leading to memory poisoning.</description><pubDate>Wed, 03 Jun 2026 21:09:55 GMT</pubDate><category>Google Gemini</category><category>Android Security</category><category>Prompt Injection</category><category>AI Security</category></item><item><title>Google Gemini Indirect Prompt Injection via Malicious Notifications</title><link>https://runtimerebel.com/blog/google-gemini-indirect-prompt-injection-via-malicious-notifications</link><guid isPermaLink="true">https://runtimerebel.com/blog/google-gemini-indirect-prompt-injection-via-malicious-notifications</guid><description>Security researchers demonstrate how malicious notifications can manipulate Google Gemini&apos;s voice assistant to perform unauthorized tasks or exfiltrate data.</description><pubDate>Wed, 03 Jun 2026 13:49:53 GMT</pubDate><category>Google Gemini</category><category>Prompt Injection</category><category>LLM Security</category><category>Hiddenlayer</category><category>Mobile Security</category></item><item><title>Google Gemini CLI Host Code Execution: Securing AI Developer Tools</title><link>https://runtimerebel.com/blog/google-gemini-cli-host-code-execution-securing-ai-developer-tools</link><guid isPermaLink="true">https://runtimerebel.com/blog/google-gemini-cli-host-code-execution-securing-ai-developer-tools</guid><description>Critical security flaw in Google Gemini CLI allows host code execution and supply chain attacks via malicious configurations. Learn how to mitigate.</description><pubDate>Thu, 30 Apr 2026 12:41:54 GMT</pubDate><category>Google Gemini</category><category>Cli Security</category><category>Sandbox Escape</category><category>RCE</category></item><item><title>Gemini CLI Critical RCE Fix: Patching the @google/gemini-cli Flaw</title><link>https://runtimerebel.com/blog/gemini-cli-critical-rce-fix-patching-the-google-gemini-cli-flaw</link><guid isPermaLink="true">https://runtimerebel.com/blog/gemini-cli-critical-rce-fix-patching-the-google-gemini-cli-flaw</guid><description>Google patches a CVSS 10.0 flaw in Gemini CLI tools that allowed unprivileged attackers to execute commands in CI/CD environments via malicious configurations.</description><pubDate>Thu, 30 Apr 2026 08:52:38 GMT</pubDate><category>Google Gemini CLI</category><category>GitHub Actions</category><category>Google Gemini</category><category>CI CD Security</category><category>RCE</category></item><item><title>Google Deploys Gemini AI to Combat Malvertising and Brand Fraud</title><link>https://runtimerebel.com/blog/google-deploys-gemini-ai-to-combat-malvertising-and-brand-fraud</link><guid isPermaLink="true">https://runtimerebel.com/blog/google-deploys-gemini-ai-to-combat-malvertising-and-brand-fraud</guid><description>Google expands the use of Gemini LLMs to detect sophisticated ad scams, blocking 5.5 billion ads and countering AI-generated brand impersonation tactics.</description><pubDate>Thu, 16 Apr 2026 16:38:55 GMT</pubDate><category>Google Gemini</category><category>Malvertising</category><category>Ad Safety</category><category>AI in Cybersecurity</category><category>Phishing</category></item><item><title>Google Gemini Side Panel Bug Enables Session Hijacking — Update Now</title><link>https://runtimerebel.com/blog/google-gemini-side-panel-bug-enables-session-hijacking-update-now</link><guid isPermaLink="true">https://runtimerebel.com/blog/google-gemini-side-panel-bug-enables-session-hijacking-update-now</guid><description>Researchers discovered a security flaw in the Google Gemini side panel that allows for unauthorized session hijacking and cross-origin data exfiltration.</description><pubDate>Mon, 02 Mar 2026 16:20:11 GMT</pubDate><category>Google Gemini</category><category>Chrome Security</category><category>Session Hijacking</category><category>Hiddenlayer</category><category>Ai Vulnerability</category></item><item><title>Data Poisoning Risks in Real-Time AI Search and Ingestion</title><link>https://runtimerebel.com/blog/data-poisoning-risks-in-real-time-ai-search-and-ingestion</link><guid isPermaLink="true">https://runtimerebel.com/blog/data-poisoning-risks-in-real-time-ai-search-and-ingestion</guid><description>A recent experiment highlights how rapid web scraping for AI models like Gemini and ChatGPT enables data poisoning attacks through unverified web content.</description><pubDate>Wed, 25 Feb 2026 12:29:49 GMT</pubDate><category>AI Security</category><category>Data Poisoning</category><category>LLM</category><category>Google Gemini</category><category>ChatGPT</category><category>RAG</category></item></channel></rss>