--- title: From Prompt Injection to Data Exfiltration · Embrace The Red description: Google Bard recently received powerful updates, including Extensions that allow it to access YouTube, search for flights and hotels, and access a user's... canonical: https://daily.dev/posts/from-prompt-injection-to-data-exfiltration-embrace-the-red-8zm3iqerb twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: From Prompt Injection to Data Exfiltration · Embrace The Red | daily.dev og:description: Google Bard recently received powerful updates, including Extensions that allow it to access YouTube, search for flights and hotels, and access a user's... og:url: https://daily.dev/posts/from-prompt-injection-to-data-exfiltration-embrace-the-red-8zm3iqerb og:image: https://api.daily.dev/og/posts/8zm3iqERB.png og:image:alt: From Prompt Injection to Data Exfiltration · Embrace The Red og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # From Prompt Injection to Data Exfiltration · Embrace The Red **[Hacker News](https://daily.dev/sources/hn)** · 5 min read · 0 upvotes · 0 comments ## Summary Google Bard recently received powerful updates, including Extensions that allow it to access YouTube, search for flights and hotels, and access a user's personal documents and emails. This opens up the possibility for Indirect Prompt Injection attacks via emails or Google Docs. The article explains the vulnerability of Bard to image markdown injection and the bypass of Google's Content Security Policy. It also showcases a demo and the timeline of the fix for the issue. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: --- Tags: [#data-exfiltration](https://daily.dev/tags/data-exfiltration), [#google-bard](https://daily.dev/tags/google-bard), [#prompt-injection](https://daily.dev/tags/prompt-injection), [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/from-prompt-injection-to-data-exfiltration-embrace-the-red-8zm3iqerb) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"From Prompt Injection to Data Exfiltration · Embrace The Red","url":"https://daily.dev/posts/from-prompt-injection-to-data-exfiltration-embrace-the-red-8zm3iqerb","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/from-prompt-injection-to-data-exfiltration-embrace-the-red-8zm3iqerb"},"datePublished":"2023-11-13T19:24:51.564Z","dateModified":"2025-07-28T02:15:14.393Z","description":"Google Bard recently received powerful updates, including Extensions that allow it to access YouTube, search for flights and hotels, and access a user's...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/cb77e744e7cade2d47c375e05c329814?_a=AQAEufR","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/cb77e744e7cade2d47c375e05c329814?_a=AQAEufR","isAccessibleForFree":true,"articleSection":"Hacker News","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Hacker News","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/hn","url":"https://daily.dev/sources/hn"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/from-prompt-injection-to-data-exfiltration-embrace-the-red-8zm3iqerb","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"data-exfiltration,google-bard,prompt-injection,security","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Hacker News","item":"https://daily.dev/sources/hn"},{"@type":"ListItem","position":3,"name":"From Prompt Injection to Data Exfiltration · Embrace The Red"}]} ```