Google has open-sourced Mantis, a stack-agnostic toolkit designed to equip AI coding agents with a comprehensive set of security review skills, enabling them to manage the complete vulnerability lifecycle. This toolkit allows agents to identify suspected flaws, eliminate false positives…
Reports mentioning Gemini CLI
Security researchers at Novee Security demonstrated critical vulnerabilities in the default configurations of coding agents from Anthropic and Google, enabling unauthorized code execution on their respective CI (Continuous Integration) runners.
Researchers successfully exploited sandbox escape vulnerabilities in several AI-powered development tools, including Cursor, Codex, Gemini CLI, and Antigravity, between late 2023 and early 2024. These exploits allowed AI agents to write files that were subsequently executed by trusted host tools…
A Russian-speaking hacker, identified as "bandcampro," utilized Google's open-source Gemini Command Line Interface (CLI) to control a botnet comprising eight computers from dental clinics. This operation was discovered through an analysis of 200 Gemini CLI session logs spanning from March…
A Russian-speaking threat actor identified as "bandcampro" has leveraged Google's open-source Gemini Command Line Interface (CLI) tool to function as a hacking agent and manage a botnet. This discovery was detailed in a report by security researchers who observed…