Ошибка в интерфейсе Gemini позволяла запускать вредоносный код

cryptonews.ruPublicado a 2025-07-24Actualizado a 2025-07-30

Сервис кибербезопасности Tracebit обнаружил критическую уязвимость в Google Gemini CLI. Она позволяет незаметно выполнять вредоносные команды, если пользователь просматривает подозрительный код с помощью нейросети.

Google Gemini CLI — это инструмент командной строки (Command Line Interface), который позволяет разработчикам взаимодействовать с ИИ-моделью Gemini от Google напрямую из терминала. Он позволяет:

анализировать, интерпретировать и генерировать код с помощью ИИ;
принимать текстовые команды от пользователя и отправлять их в модель Gemini для получения ответов;
обозревать чужой код, генерировать функции, исправлять ошибки и выполнять другую инженерную работу — прямо в терминале.

Сотрудник Tracebit Сэм Кокс рассказал, что «из-за токсичного сочетания некорректной валидации, внедрения команд через промпт и вводящего в заблуждение интерфейса, просмотр кода стабильно приводит к тихому выполнению вредоносных команд».

Спрятав «инъекцию» промпта в файл README.md, который также содержал полный текст лицензии GNU Public Licence и прилагался к безопасному скрипту на Python, эксперт смог заставить Gemini передать учетные данные с помощью команд env и curl на удаленный сервер, ожидающий подключения.

Источник: Tracebit.

Изначально Google присвоил обнаруженной Коксом уязвимости приоритет два и четвертый уровень серьезности в рамках программы Bug Hunters после получения отчета 27 июня.

Около трех недель спустя корпорация переклассифицировала уязвимость как самую серьезную и требующую срочного и немедленного внимания, поскольку она может привести к значительной утечке данных, несанкционированному доступу или выполнению произвольного кода.

Пользователям рекомендуется обновиться до версии Gemini 0.1.14, в которой добавлены механизмы защиты от выполнения команд оболочки и реализованы меры против описанной атаки.

Включение «песочницы» — изолированной среды, которая защищает систему пользователя — также предотвращает атаку, обнаруженную Коксом.

Однако после установки Gemini CLI по умолчанию запускается без песочницы.

Напомним, в июне ИИ-инструмент Xbow возглавил таблицу белых хакеров, которые обнаружили и сообщили о наибольшем количестве уязвимостей в ПО крупных компаний.

Lecturas Relacionadas

EU Grants Regulatory Bodies Authority to Block Crypto Platforms from Third Countries

The European Union has expanded its sanctions targeting the use of cryptocurrencies to circumvent restrictions against Russia. The new measures, part of the 21st sanctions package, empower the EU to impose nationwide blocks on crypto platforms. A key provision allows the EU to blacklist entire third countries if their jurisdictions systematically fail to prevent sanctioned Russian and Belarusian individuals from using crypto asset services. This grants the sanctions an extraterritorial reach. The package also broadens existing prohibitions, banning Russians and Belarusians from holding positions or controlling crypto service providers within the EU, effective August 25. Experts note this shift represents a move toward secondary sanctions and could create legal conflicts in jurisdictions where local laws contradict EU measures.

cryptonews.ruHace 5 min(s)

EU Grants Regulatory Bodies Authority to Block Crypto Platforms from Third Countries

cryptonews.ruHace 5 min(s)

Xinhuo Research Institute: White House Meeting × CLARITY Act × AI Capital Diversion – The Triple Variables for Bitcoin

The market is undergoing a comprehensive reset from regulatory expectations to capital structure. New Huo Research Institute's latest analysis indicates Bitcoin faced pressure last week due to multiple factors: the SEC abruptly canceled a planned crypto regulatory meeting; spot Bitcoin ETFs saw outflows of approximately $390 million after two weeks of net inflows; and the Coinbase Bitcoin Price Index showed sustained negative premiums. These signals collectively suggest the market is awaiting the next point of certainty. This anchor point may arrive this week. On the policy front, a White House meeting with crypto industry executives is expected on August 19, with potential participation from SEC and CFTC officials, followed by a CFTC Innovation Advisory Committee meeting on August 20. Discussions around the CLARITY Act may also advance in September. The研究院 views these events as likely to release positive policy signals, potentially offering marginal support to market sentiment. Macro conditions are also turning accommodative. With cooling US inflation and weak retail data, market expectations for a September rate hike have significantly decreased. However, tensions in the Middle East affecting global oil supply warrant monitoring. A notable structural shift is the massive diversion of capital into the AI sector, tightening overall liquidity for crypto markets and contributing to the current subdued environment. Monitoring when AI investment cools and overall macro conditions ease will be crucial. On the technical front, Bitcoin is in a consolidation phase after a pullback from highs, with key resistance at $65,000/$65,800 and support at $62,500/$62,000. New Huo Research believes the current range could form a阶段性 bottom as regulatory catalysts gradually materialize.

marsbitHace 5 min(s)

Xinhuo Research Institute: White House Meeting × CLARITY Act × AI Capital Diversion – The Triple Variables for Bitcoin

marsbitHace 5 min(s)

Podcast Notes | Conversation with Bitwise CIO Matt: If You Have 0% Crypto Allocation Now, You Are Actively Bearish on the Market Outlook

Podcast Notes | Interview with Bitwise CIO Matt Hougan: "A 0% Crypto Allocation Today is an Active Bearish Bet" **Key Takeaways from Matt Hougan (CIO, Bitwise):** * **Market Sentiment:** Despite crypto being down ~50% from highs, Wall Street is "ALL-IN." Major institutions like BlackRock, Morgan Stanley, Wells Fargo, and UBS view crypto as a long-term asset class, continuing to build and launch products (e.g., tokenized funds, ETFs) regardless of short-term price or regulatory delays (like the CLARITY Act). * **BTC Resilience:** Bitcoin's recent price stability amid negative news (AI stock sell-off, MicroStrategy sales, fading regulatory odds) signals underlying strength. Hougan argues the "weak hands" have sold; remaining holders are long-term believers. * **Regulatory Outlook:** The CLARITY Act may remain in legislative limbo, but crypto development won't wait. Tokenization of real-world assets (RWA) is a major, irreversible trend backed by large traditional finance players. * **Investment Strategy:** Hougan advocates for a 5% crypto allocation in a traditional portfolio. He calls this the "magic number" for significantly boosting returns without materially increasing overall portfolio volatility. Critically, he states that a 0% allocation is not neutral but an **"active bearish bet"** against the asset class, given crypto's current ~2% share of global equity market cap. * **Ethereum & Altcoins:** Hougan is bullish on Ethereum (price target: $8000), citing its leading role in tokenization and stablecoins. For altcoins, he highlights assets tied to the tokenization narrative (e.g., Solana, Chainlink, Ondo) and those generating "real yield" (e.g., Hyperliquid). * **DCA vs. Lump Sum:** Both strategies have merit. Dollar-cost averaging (DCA) provides behavioral protection against volatility, while a lump sum investment may capture more upside if Bitcoin's suppressed volatility breaks upward.

marsbitHace 24 min(s)

Podcast Notes | Conversation with Bitwise CIO Matt: If You Have 0% Crypto Allocation Now, You Are Actively Bearish on the Market Outlook

marsbitHace 24 min(s)

Anthropic, Dario Amodei, and "The Last Private Company"

The article explores the contrasting narratives surrounding Anthropic and its founder, Dario Amodei. He is portrayed as both a cautious "watchman" warning of AI's existential dangers and an ambitious driver racing to build that very future. The core tension lies in Amodei's belief that since powerful AI is inevitable, Anthropic must lead its development to ensure it's done "responsibly." Driven by personal tragedy—his father's death before a cure arrived—Amodei is obsessed with accelerating science. He co-founded Anthropic after leaving OpenAI over governance concerns, aiming to build top models while establishing safety standards. Anthropic developed "Constitutional AI" to align models and proposed risk-based policies, positioning itself as both creator and regulator. Amodei envisions AI bringing immense benefits, like curing diseases within years. However, his roadmap reveals a geopolitical vision: he argues the US and its allies must secure a dominant, "unipolar" advantage in advanced AI to lock in strategic supremacy before sharing benefits. The article critiques this logic. While Amodei eloquently warns of concentrated corporate power and influence, his solutions consistently grant Anthropic more authority. He disqualifies other actors—markets, the public, rival nations—as unfit to steer the future, ultimately positioning Anthropic as the necessary custodian. This culminates in an alleged, unconfirmed internal vision where Anthropic becomes "the world's only private company." The piece concludes that Amodei, sincerely believing he sees the dangers most clearly, has authored his own justification to hold the wheel.

marsbitHace 34 min(s)

Anthropic, Dario Amodei, and "The Last Private Company"

marsbitHace 34 min(s)

Oracle Hacker of Pando Rings Resurfaces and Redirects ETH to Tornado Cash

The wallet associated with the 2022 Pando Rings oracle hack was reactivated on August 18, 2026, after two months of inactivity. The hacker exchanged 3 million DAI for approximately 1,570 ETH (worth ~$3 million) via the CoW Protocol. Subsequently, about 800 ETH (worth ~$1.52 million) was deposited into the Tornado Cash mixer through eight transactions. This event revisits the November 2022 hack, where the attacker manipulated the price of a liquidity token on Pando's 4swap AMM, initially attempting to steal around $70 million. While $21.9 million was withdrawn, Pando, with Mixin Network and SlowMist, froze remaining assets valued over $50 million. The hacker has been periodically active since, including a major purchase of 6,243 ETH for 10 million DAI in June 2026. The recent conversion of stolen stablecoins to ETH and subsequent movement to Tornado Cash follows a known strategy of timing the market and laundering funds. The reactivation coincided with Pando's announcement on August 15, 2026, to sunset its protocol and transition services to maintenance mode. The case underscores how stolen crypto assets can lie dormant for years before being moved through privacy infrastructure. While oracle manipulation attacks have significantly declined in DeFi since 2022, this incident represents a legacy exploit from an earlier security era.

cryptonews.ruHace 37 min(s)

Oracle Hacker of Pando Rings Resurfaces and Redirects ETH to Tornado Cash

cryptonews.ruHace 37 min(s)

Trading

Spot