Gemini CLI Archives • Daily CyberSecurity

Plugin4Shell: Zero-Click RCE Hits Four AI Coding Agents

Plugin4Shell zero-click RCE vulnerability affecting Claude Code, Codex, GitHub Copilot, and Gemini CLI through an AI coding agent SHA-pinning bypass

Plugin4Shell: Zero-Click RCE Hits Four AI Coding Agents

Do Son September 21, 2026

Plugin4Shell is a zero-click RCE hitting every major AI coding agent via a SHA pinning bypass. Claude Code and Codex are patched; Copilot and Gemini CLI are not.

Threat Actor Rebuilt a Live Botnet in Six Minutes Using an AI Coding Agent AccountDumpling Phishing Google AppSheet Abuse AI-Generated Malware PureRAT Campaign RondoDoX Botnet, Next.js React2Shell EchoGather, Paper Werewolf Salt Typhoon, Telecom Espionage BreachForums, Conor Fitzpatrick Ransomware Negotiation, DOJ Investigation MirrorFace group - Earth Kasha Emperor Dragonfly

AccountDumpling Phishing Google AppSheet Abuse AI-Generated Malware PureRAT Campaign RondoDoX Botnet, Next.js React2Shell EchoGather, Paper Werewolf Salt Typhoon, Telecom Espionage BreachForums, Conor Fitzpatrick Ransomware Negotiation, DOJ Investigation MirrorFace group - Earth Kasha Emperor Dragonfly

Threat Actor Rebuilt a Live Botnet in Six Minutes Using an AI Coding Agent

Do Son July 21, 2026

An AI-powered botnet was migrated in six minutes by a solo actor using Gemini CLI. TrendAI Research analyzed 200 session logs from "bandcampro".

Gemini CLI Vulnerability Hits Maximum CVSS 10 Score Google Gemini CLI vulnerability execution flow and CVE-2026-12537 patch details

Gemini CLI Vulnerability Hits Maximum CVSS 10 Score

Do Son June 29, 2026

A critical CVSS 10 Gemini CLI vulnerability (CVE-2026-12537) allows unprivileged attackers to execute code in GitHub Actions. Patch your workflows now.

Gemini CLI Deprecation: Google Moves Developers to Antigravity CLI Gemini CLI deprecation notice as Google moves developers to the Antigravity CLI terminal tool Google Antigravity 2.0 release

Gemini CLI deprecation notice as Google moves developers to the Antigravity CLI terminal tool Google Antigravity 2.0 release

Gemini CLI Deprecation: Google Moves Developers to Antigravity CLI

Do Son June 22, 2026

Google's Gemini CLI deprecation took effect on June 18, 2026. Personal accounts must now migrate to Antigravity CLI. See who's affected and why.

Global Malicious AI Installer Campaign Targets Developer Workstations Layoff Phishing Scam Remcos RAT Malware Aruba Phishing, Phishing-as-a-Service PyPI, phishing CVE-2024-25608 PyPI Phishing, Credential Theft

Layoff Phishing Scam Remcos RAT Malware Aruba Phishing, Phishing-as-a-Service PyPI, phishing CVE-2024-25608 PyPI Phishing, Credential Theft

Global Malicious AI Installer Campaign Targets Developer Workstations

Do Son May 27, 2026

EclecticIQ warns of a malicious AI installer campaign using SEO poisoning to deliver fileless infostealers to developer environments.

Patching the CVSS 10 RCE Hole in Gemini CLI Gemini CLI Security Update Headless RCE Patch

Patching the CVSS 10 RCE Hole in Gemini CLI

Do Son April 28, 2026

Critical CVSS 10 update for Gemini CLI (@google/gemini-cli). Fixes headless RCE and --yolo prompt injection risks. Upgrade to v1.83.7 to secure your pipelines.

Google Cloud Unveils Gemini CLI: Free AI Assistant Brings Gemini 2.5 Pro to Your Terminal Google Gemini CLI, AI Command Line

Google Cloud Unveils Gemini CLI: Free AI Assistant Brings Gemini 2.5 Pro to Your Terminal

Do Son June 27, 2025

Google Cloud launches Gemini CLI, a free, open-source terminal tool bringing Gemini 2.5 Pro to developers for code generation, debugging, and file manipulation.