src_c25d91fa3ad9ae9ac7
- Source-provided label
- Not reported
- Evidence class
- mentioned in report
- Confidence
- Not reported
- Observed
- Feb 23, 2024 06:00 UTC
- Retrieved
- Oct 08, 2026 03:44 UTC
Google Gemini: Planting Instructions For Delayed Automatic Tool Invocation
Last November, while testing Google Bard (now called Gemini) for vulnerabilities, I had a couple of interesting observations when it comes to automatic tool invocation. Confused Deputy - Automatic Tool Invocation First, what do I mean by this… “automatic tool invocation”… Consider the following scenario: An attacker sends a malicious email to a user containing instructions to call an external tool
Reference details
- Source category
- Research & news
- Report title
Google Gemini: Planting Instructions For Delayed Automatic Tool Invocation- First reported
- Feb 23, 2024 06:00 UTC
- Last reported
- Feb 23, 2024 06:00 UTC
- Catalog updated
- Oct 08, 2026 03:44 UTC
- Record ID
8978fa8402ac70187a0863c1f0c14a951d22ed9587a6249a896e9a0dc49f5c14
Published indicators
Network indicators are visibly defanged. This page does not make them clickable or send them to another service.
No validated file hashes or network indicators are stored for this record.
Source observations
This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 1 unverified.
Review source update dates and status
- src_c25d91fa3ad9ae9ac7Collection status unverifiedLast successful batch: Unverified
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.