Loading story…
Google expanded Gemini Personal Intelligence beyond paid subscribers, making the feature available to more free U.S. users across AI Mode in Search, the Gemini app, and Gemini in Chrome. The feature connects Gemini to personal Google services such as Gmail, Google Photos, YouTube, and Search history—with user permission—so it can provide more contextual, personalized responses instead of generic answers. Reported use cases include shopping recommendations based on prior purchases, travel and layover suggestions tailored to preferences and location, and troubleshooting help informed by a user’s device or purchase history.
Google said the capability is opt-in and lets users choose which apps and services to connect, with the option to disconnect them later. Coverage of the rollout emphasized the amount of personal context Gemini can access, including email, photos, and search activity, and noted that the feature was previously limited to users paying for Google’s AI subscription. One report highlighted a hands-on test in which Gemini identified vehicle details and recommended tire options and local sellers, illustrating the depth of personalization now being offered to a broader user base.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
4 events from the most recent confirmed update back to the earliest known activity.
Google announced that eligible users in the U.S. can now use Gemini's Personal Intelligence for free to create deeply personalized images. The opt-in feature connects Gemini with Nano Banana and Google Photos, alongside other Google services, so generated content can reflect a user's preferences, lifestyle, and photos.
Google announced two new personalization updates for Gmail's AI-powered 'Help me write' feature: topic contextualization using Gmail and Google Drive content, and tone/style personalization based on a user's writing style. The changes prompted renewed privacy scrutiny because they rely on analysis of user email and related account data when smart features are enabled.
Google announced that it was rolling out Personal Intelligence beyond paid subscribers to most free personal Google accounts in the United States. The opt-in feature was made available across AI Mode in Search, the Gemini app, and Gemini in Chrome, with controls to connect or disconnect supported Google services.
Google initially made Gemini's Personal Intelligence capability available only to paid Google AI subscribers. The feature connected Gemini to services such as Gmail, Google Photos, YouTube, and Search history to provide more personalized responses with user permission.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
5 references tracked. Mallory keeps watching after this page renders.
blog.google
Open sourcetechrepublic.com
Open sourcezdnet.com
Open sourcezdnet.com
Open sourcehowtogeek.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Google is testing deeper **Gemini** integration in Chrome via a new internal feature called **“Skills,”** which appears to let users define named, instruction-based automations that Gemini can execute inside the browser. The feature is surfaced through a new `chrome://skills` page and aligns with Google’s stated direction of turning Gemini into a more agent-like assistant capable of acting across tabs and, over time, integrating more tightly with Google services. Separately, Google has added user controls to manage the **on-device GenAI model** used by Chrome’s *Enhanced Protection* (Safe Browsing) capabilities, which were previously upgraded with AI for “real-time” detection of dangerous sites, downloads, and potentially malicious extensions. In Chrome Canary, users can disable *On-device GenAI* under **Chrome → Settings → System**, which also enables deletion of the local model; Google indicated the local model may support additional security and browser features beyond scam detection as it rolls out more broadly.
Jun 29, 2026
Google released **Gemini 3.1 Pro**, positioning it as an upgraded core model for the Gemini platform and claiming a significant jump in reasoning performance versus the prior *Gemini 3 Pro* based on internal testing and benchmark results (including an ARC-AGI-2 score cited by Google). The update follows a recent upgrade to *Gemini 3 Deep Think* that Google framed as targeting harder research problems in domains like math, coding, chemistry, and physics, while also acknowledging that benchmarks alone are not a complete measure of real-world capability. Google also added **AI music generation** to the Gemini app and web experience via **Lyria 3**, expanding Gemini beyond text/image/video into audio creation. Google said Lyria 3 outputs will include an audio watermark using **SynthID**, enabling users to check whether audio was generated by Google’s AI by uploading it to Gemini; the company also described guardrails intended to reduce direct artist-style imitation and a reporting mechanism for problematic outputs, with higher usage limits tied to paid subscription tiers (*AI Pro* and *AI Ultra*).
Jun 29, 2026
Google has acknowledged the significant risk of prompt injection attacks targeting its Gemini-powered Chrome browsing agent, which can be manipulated to perform unauthorized actions such as initiating financial transactions or exfiltrating sensitive data. In response, Google has introduced a second AI model, termed the 'user alignment critic,' designed to independently vet the agent's proposed actions before execution. This model operates in isolation from untrusted web content, providing an additional layer of defense against both goal hijacking and data leakage. The move comes as prompt injection has been identified as a leading vulnerability in AI systems, with industry bodies like OWASP and the UK's National Cyber Security Centre highlighting its prevalence and difficulty to mitigate due to the structural limitations of large language models. The Gemini-powered browsing agent, currently in preview, is capable of navigating websites, clicking buttons, and filling forms while users are logged into sensitive accounts, increasing the potential impact of successful attacks. Security experts and analysts have emphasized the need for robust safeguards, as malicious instructions can be hidden in web pages, iframes, or user-generated content. Google's dual-model approach aims to address these concerns by ensuring that any action not aligned with the user's intent is blocked, thereby reducing the risk of exploitation through prompt injection. The development reflects a broader industry trend of reassessing the security of AI-driven browsers and the need for advanced countermeasures to protect users and organizations from emerging threats.
Jun 29, 2026