This week in the wild west roundup:
...oft 365 Copilot allows arbitrary data exfiltration via Mermaid diagrams. Google Gemini's own demo breaks Google's own captchas without asking the user for permission.
Topic: Gemini
39 mentions · 29 chunks · 25 episodes
13.9× distinctiveness vs baseline
?
How much more common this term is here than in ordinary English. Higher values mean the topic is more characteristic of this corpus.
3.0x burst in 2026 Q2
?
Peak quarter intensity across the topic's active span. Higher values mean attention was concentrated into a shorter stretch rather than spread evenly over time.
Topic summary
?
A short read on the topic's time range, peak episode, and strongest associations. Use it as the quick orientation before drilling into examples.
- Gemini appears in 29 chunks across 25 episodes, from 2024-02-12 to 2026-08-24.
- Its densest episode is Bits and Bobs 6/8/26 (2026-06-08), with 3 observations on this topic.
- Semantically it travels with wild west, injection attack, and Microsoft, while by chunk count it sits between bobs and agent swarm; its yearly rank moved from #130 in 2024 to #26 in 2026.
Over time
?
Raw mentions over time. Use this to see absolute attention, not relative rank among all topics.
Observations
?
The primary evidence view for this topic. Sort it chronologically when you want concrete examples behind the larger pattern.
This week in the wild west LLM security round up:
...ed by carefully crafted URLs. A trifecta of prompt injection vulnerabilities in Gemini. This one includes log messages that trick you into exfiltrating information. An analysis of AI vulnerability reports: "More than $2.1 million was pa...
This week in "we're in the wild west era" of LLMs.
...much. From MCP to Shell How MCP Authentication Flaws Enable RCE in Claude Code, Gemini CLI, and More. A malicious MCP server has been stealing your emails This one isn't a prompt injection attack, just a good old supply chain attack. A ...
I can't believe that Chrome is planning to roll out AI autopilot for the browser.
...he browser. "In the coming months, we'll be introducing agentic capabilities to Gemini in Chrome. These will let Gemini in Chrome handle those tedious tasks that take up so much of your time, like booking a haircut or ordering your week...
The Gemini CLI had a massive vulnerability around allowlisted commands.
The Gemini CLI had a massive vulnerability around allowlisted[do] commands. The allowlist matching performed inadequate parsing. It extracted only the 'root com...
The News Feed betrayal effect: the dissonance that happens where sensitive data users added in one context is now used in another context.
...uld pop back up unexpectedly in other conversations. If Google were to activate Gemini over users data, with decades of your state stored in a private context, that would be catastrophic. Like Buzz but 1000 times worse. In some ways, Go...
Every built a Diplomacy game for LLMs to play.
Every built a Diplomacy game for LLMs to play. Gemini generally does well. Claude refuses to lie, and thus loses often. ChatGPT o3 often wins because it is very happy to betray its collaborators. The thi...
Someone shared with me https://novehiclesinthepark.com
...y own score of how aligned I was with others who have taken the survey was 81%. Gemini got 67%. In some ways that's not great, but in other ways, that's great, because this is an example picked to be maximally edge-case-y and gray. For ...
In systems that have a quality component (e.g.
... well they perform on queries optimized for ChatGPT primarily. If services like Gemini don't do well on those, then users might say "eww not as good as ChatGPT" and not come back. So services like Gemini have to be at least good enough ...