Kikimora Morozova

Summary: Trail of Bits published research detailing how attackers can exploit image scaling to attack production AI systems including Gemini CLI, Vertex AI Studio, Gemini's web and API interfaces, Google Assistant, and Genspark. The post covers mitigation and defense against these attacks and introduces Anamorpher, an open-source tool for exploring and generating the crafted images.
Why it matters: The attack surface here is image scaling itself, a routine preprocessing step inside named production systems from Google and Genspark, not a flaw in a single product - so the same technique reaches every interface that resizes an image before a model sees it.

Read the original at Trail of Bits Blog ↗