Suha Sabi Hussain

Summary: Trail of Bits researchers Kikimora Morozova and Suha Sabi Hussain published a post detailing how attackers can exploit image scaling against production AI systems including Gemini CLI, Vertex AI Studio, Gemini's web and API interfaces, Google Assistant, and Genspark. The post also covers mitigations and introduces Anamorpher, an open-source tool for exploring and generating these crafted images.
What you should know: The attack surface named here is not experimental: Gemini CLI, Vertex AI Studio, Google Assistant, and Genspark are production systems, and the technique is image scaling, a preprocessing step most teams never treat as a security boundary.

Read the original at Trail of Bits Blog ↗