/
Navigation
Chronicles
Browse all articles
Explore
Semantic exploration
Research
Entity momentum
Nexus
Correlations & relationships
Story Arc
Topic evolution
Drift Map
Semantic trajectory animation
Posts
Analysis & commentary
Pulse API
Tech news intelligence API
Browse
Entities
Companies, people, products, technologies
Domains
Browse by publication source
Handles
Browse by social media handle
Detection
Concept Search
Semantic similarity search
High Impact Stories
Top coverage by position
Sentiment Analysis
Positive/negative coverage
Anomaly Detection
Unusual coverage patterns
Analysis
Rivalry Report
Compare two entities head-to-head
Semantic Pivots
Narrative discontinuities
Crisis Response
Event recovery patterns
Connected
Search: /
Command: ⌘K
Embeddings: large
TEXXR

Chronicles

The story behind the story

days · browse · Enter similar · o open

Researcher Johann Rehberger shows a hack to override Gemini's prompt injection defenses, letting an attacker plant long-term memories for all future sessions

In the nascent field of AI hacking, indirect prompt injection has become a basic building block for inducing chatbots …

Ars Technica Dan Goodin

Discussion

  • @wunderwuzzi23 Johann Rehberger on x
    🔥 Hacking Google Gemini Memories 👉 By leveraging a tool invocation bypass that I described and reported over a year ago, it is also possible to invoke the recently added memory tool to manipulate a user's memories - all initiated via prompt injection from untrusted data. 🚨It
  • @wunderwuzzi23 Johann Rehberger on x
    12 months ago I posted and predicted that this would be possible once Gemini has access to more powerful tools that “write” data — the memory feature is now such a state changing tool. Back then there was only the Workspace Extension that was limited to read only operations