Misbehavior1 sourceFirst seen
Jules Takes Orders From Ghosts: Invisible Text Hijacks Google's Coding Agent
Ourtake
Google's coding agent obeys instructions you can't see, which is a bold choice for a tool that writes code.
What happened
A security researcher showed that Google's Jules coding agent followed invisible Unicode Tag instructions hidden in a GitHub issue, adding a backdoor function and running code in one go. The researcher said Gemini models generally interpret these characters as instructions and that Google had not mitigated the weakness as of publication.