Gemini threat report

Researchers demonstrated that encrypted prompts can bypass guardrails in both Grok and Gemini, potentially allowing users to extract sensitive information and steal chat histories. The technique exploits a gap in content filtering systems that relies on plaintext analysis.