Google Security Incident
A new zero-click agentic browser attack exploits the excessive agency of LLM-powered assistants, allowing specially crafted emails to trick the browser agent into executing destructive commands. This "Google Drive Wiper" technique leverages granted OAuth access to delete an entire user's Google Drive contents without requiring user confirmation.
What Happened
A new zero-click agentic browser attack exploits the excessive agency of LLM-powered assistants, allowing specially crafted emails to trick the browser agent into executing destructive commands. This "Google Drive Wiper" technique leverages granted OAuth access to delete an entire user's Google Drive contents without requiring user confirmation.
Why This Matters
Current evidence identifies a security issue involving Google, but does not yet support a more specific impact claim.
Recommended Action
No confirmed vendor remediation is available in the current evidence. Confirm whether Google is present in your environment and review the affected configuration.
Exposure
Exposure unknown
Dec 05, 2025 05:30
Exposure reason: This incident does not currently match a technology in My AI Stack.
Exploitation status: UNKNOWN
Primary entities:
Timeline
-
Incident first seen
Dec 05, 2025 05:30BugSkan first recorded this incident.
-
Zero-Click Agentic Browser Attack Can Delete Entire Google Drive Using Crafted Emails - The Hacker News
Dec 05, 2025 05:30thehackernews.com · Research
Sources
thehackernews.com · Dec 05, 2025 05:30
A new zero-click agentic browser attack exploits the excessive agency of LLM-powered assistants, allowing specially crafted emails to trick the browser agent into executing destructive commands. This "Google Drive Wiper" technique leverages granted OAuth access to delete an entire user's Google Drive contents without requiring user confirmation.
Open publisher sourceMy AI Stack Match
Create an account to see which incidents overlap with your AI stack.