{"ok":true,"trend":{"id":972190,"platform":"mastodon","region":"global","key":"🤖 google is testing \"additional sandbox options\" in gemini desktop for macos: the ai could read, create, modify or delet","title":"🤖 Google is testing \"additional sandbox options\" in Gemini Desktop for macOS: the AI could read, create, modify or delet","url":"https://infosec.exchange/@cloud/117382043995593801","first_seen":"2026-10-04T10:08:56.598485Z","last_seen":"2026-10-04T10:08:56.598485Z","last_rank":12,"peak_rank":12,"last_volume":2,"peak_volume":2,"seen_count":1,"score":0.76203125,"category_hint":"cybersecurity","section":"technology","category":"cybersecurity","summary":"Google is testing new 'additional sandbox options' in the Gemini desktop app for macOS that would let the AI assistant read, create, modify or delete files anywhere on a user's machine, and control apps like Mail, Safari and Messages without asking for confirmation on each action. Security observers warn this dramatically expands the potential damage of prompt-injection attacks, since a manipulated agent could act across the whole system.","why":"Security researchers are alarmed that giving an AI agent broad, unconfirmed control over files and apps enlarges the attack surface for prompt-injection exploits.","tone":"negative","entities":["Google","Gemini","macOS"],"summarized_at":"2026-10-04T10:10:23.716170Z","meta":{"tag":"infosec","via":"scan","kind":"status","lang":"en","instance":"mastodon.social","tag_uses":607},"nw":null,"promo":null,"kind":null,"importance":null,"hidden":false,"hide_reason":null,"judged_at":null,"title_en":"Google tests wider file access for Gemini on macOS","section_name":"Technology","category_name":"Cybersecurity","timeline":[{"captured_at":"2026-10-04T10:08:56.598485Z","rank":12,"volume":2}],"posts":[{"platform":"mastodon","url":"https://infosec.exchange/@cloud/117382043995593801","author":"cloud@infosec.exchange","title":null,"snippet":"🤖 Google is testing \"additional sandbox options\" in Gemini Desktop for macOS: the AI could read, create, modify or delete files anywhere on the machine, drive Mail/Safari/Messages and act without per-action confirmation. That widens the prompt-injection blast radius for agentic…","posted_at":"2026-10-04T09:57:29Z","likes":2}],"elsewhere":[],"window":"7d"}}