Aggregator

Google Jules: Vulnerable to Multiple Data Exfiltration Issues

Embrace The Red
8 months 2 weeks ago

This post explores data exfiltration attacks in Google Jules, an asynchronous coding agent. This is the first of three posts that will highlight my research on Google Jules in May 2025. All information provided was also shared with Google at that time.

This first post will focus on data exfiltration, the lethal trifecta.

But let’s first talk about Jules’ system prompt.

Jules’ System Prompt and Multiple Agents

To grab the system prompt I just asked it to write it into a file.

Google Jules: Vulnerable to Multiple Data Exfiltration Issues

不安全
8 months 2 weeks ago
文章探讨了Google Jules的数据外泄攻击，包括通过Markdown图片渲染、view_text_website工具及无限制网络访问的三种途径。攻击者可利用GitHub问题等进行提示注入，迫使Jules泄露敏感信息。建议采取内容安全策略、域名白名单等措施。

Google Gemini's Deep Research is finally coming to API

不安全
8 months 2 weeks ago
Google Gemini的Deep Research功能可搜索学者、研究论文等信息，并生成多页报告。目前仅限于Gemini界面使用，但即将通过API扩展至更多场景，如集成到开发工具中。该功能支持自动生成个性化研究计划，并能自主搜索网络获取最新信息。

Managed ad