Prompt Injection

Isometric AI robot agent clicking inside a browser ad dashboard with a hidden trapdoor and a padlock, illustrating Gemini computer use security risk

Before You Hand Gemini Your Ad Account, Look at the Hijack Numbers

Google moved "computer use" into Gemini 3.5 Flash on June 24, 2026, giving its AI agent the ability to click, type, and navigate browsers and desktop apps on your behalf. The catch is in the testing data: Anthropic measured browser agents getting hijacked by prompt injection 23.

Blueprint schematic of a Summarize with AI button labeled as a UX element, with annotations showing hidden URL prompt injection parameters and a callout counting 31 companies caught.

'Ask AI' Buttons Aren't Moving GEO. 31 Companies Turned Them Into Attacks.

Every SEO call this week has someone pitching 'Ask AI' buttons as the new generative engine optimization cheat code. A 'Summarize with ChatGPT' link in the header. A 'Save to Perplexity memory' toggle at the bottom of every article. The pitch is always the