Get the latest tech news
Hackers Hijacked Google’s Gemini AI With a Poisoned Calendar Invite to Take Over a Smart Home
For likely the first time ever, security researchers have shown how AI can be hacked to create real world havoc, allowing them to turn off lights, open smart shutters, and more.
(The 2017 research that led to the recent generative AI breakthroughs like ChatGPT is called “ Attention Is All You Need.”) In the demonstrations, revealed at the Black Hat cybersecurity conference in Las Vegas this week, the researchers show how Gemini can be made to send spam links, generate vulgar content, open up the Zoom app and start a call, steal email and meeting details from a web browser, and download a file from a smartphone’s web browser. Google’s Wen, like other security experts, acknowledges that tackling prompt injections is a hard problem since the ways people “trick” LLMs is continually evolving and the attack surface is simultaneously getting more complex. These steps can include a layer of “ security thought reinforcement ” where the LLM tries to detect if its potential output may be suspicious and also efforts to remove unsafe URLs that are sent to people.
Or read this on Wired
