[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fSinHjsLKZ_5yrkkJeWKHlwImlk4hPnFMpmSaCQO9Yt8":3},{"article":4,"iocs":54,"watch_terms":55,"solutions":56,"lesson":139},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"98dcc8a3-69f6-46f3-984f-f89a749d46ea","Google Gemini could soon get full access to your Mac’s files, apps and the web","google-gemini-could-soon-get-full-access-to-your-mac-s-files-apps-and-the-web-4e1146","Google's Gemini could soon access any file on your macOS device, open apps, browse the web, and perform actions without asking for permission every time. [...]","Google is reportedly testing a new feature for its Gemini AI that would grant it extensive access to a user's macOS device. This 'desktop control' could allow Gemini to read, modify, or delete files, interact with apps like Mail and Safari, and perform actions without explicit permission for each instance. While safeguards are planned for sensitive actions, the move raises privacy concerns and could conflict with Apple's own data access considerations for AI agents.","Google Gemini may soon gain full access to Mac files, apps, and web browsing.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fgoogle\u002Fgoogle-gemini-could-soon-get-full-access-to-your-macs-files-apps-and-the-web\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2024\u002F08\u002F13\u002FGemini.jpg","2026-10-03T23:12:34+00:00","2026-10-04T00:00:39.363251+00:00",7,[17,20,22,25,27,29],{"name":18,"type":19},"Gemini","product",{"name":21,"type":19},"macOS",{"name":23,"type":24},"Google","vendor",{"name":26,"type":19},"Mail",{"name":28,"type":19},"Safari",{"name":30,"type":19},"Messages","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":31,"icon":33,"name":34,"slug":35},null,"AI Security","ai-security",[37,42,47,49],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":48},{"id":31,"icon":33,"name":34,"slug":35},{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",[],[23,18,21],{"controls":57,"vendors":133},[58,79,105],{"slug":59,"name":60,"problem":61,"products":62},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[63,71],{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"slug":80,"name":81,"problem":82,"products":83},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[84,92,97],{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-dlp","Netskope DLP","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention for web, cloud apps, AI tools and endpoints.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":93,"product_name":94,"url":95,"description":96},"purview-dlp","Microsoft Purview Data Loss Prevention","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fdata-security-governance\u002Fmicrosoft-purview-data-security","Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","enterprise-dlp","Proofpoint Enterprise DLP","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention across email, cloud and endpoints.",{"slug":35,"name":106,"problem":107,"products":108},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[109,117,125],{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","ai-defense","Cisco AI Defense","https:\u002F\u002Fwww.cisco.com\u002Fsite\u002Fus\u002Fen\u002Fproducts\u002Fsecurity\u002Fai-defense\u002Findex.html","Discovery of AI use, testing of models and guardrails for AI applications.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",[134],{"slug":135,"name":23,"logo_path":136,"roles":137},"google","\u002Fvendor-logos\u002Fgoogle.png",[138],"affected",{"slug":140,"title":141,"body":142,"framework_refs":143,"framework_notes":154},"ai-desktop-agents-demand-strict-permission-controls","AI Desktop Agents Demand Strict Permission Controls","Google's proposed 'desktop control' feature for Gemini illustrates a growing risk: AI agents being granted broad, persistent access to files, applications, and system resources without granular user oversight. The root concern is excessive privilege — when an AI can read, modify, or delete files and interact with sensitive apps like Mail without per-action consent, the attack surface expands dramatically. A compromised or misbehaving AI agent with these permissions could exfiltrate data, alter critical files, or be manipulated through prompt injection attacks. This matters because users often underestimate the cumulative risk of convenience-driven permission grants, and 'planned safeguards' are not a substitute for enforceable, minimal-privilege access controls. As AI agents become more capable, the principle of least privilege must be applied as rigorously to software agents as it is to human users.",[144,145,146,147,148,149,150,151,152,153],"CIS Control 3: Data Protection","CIS Control 6: Access Control Management","CIS Control 10: Malware Defenses","NIST SP 800-53 AC-6: Least Privilege","NIST SP 800-53 AC-3: Access Enforcement","NIST SP 800-53 AU-2: Audit Events","NIST AI RMF: GOVERN 1.1 – Policies for AI risk management","GDPR Article 25: Data Protection by Design and by Default","GDPR Article 5(1)(c): Data Minimisation","ISO\u002FIEC 27001 A.9.4: System and Application Access Control",{"CIS Control 3: Data Protection":155,"CIS Control 10: Malware Defenses":156,"NIST SP 800-53 AU-2: Audit Events":157,"NIST SP 800-53 AC-6: Least Privilege":158,"GDPR Article 5(1)(c): Data Minimisation":159,"NIST SP 800-53 AC-3: Access Enforcement":160,"CIS Control 6: Access Control Management":161,"GDPR Article 25: Data Protection by Design and by Default":162,"ISO\u002FIEC 27001 A.9.4: System and Application Access Control":163,"NIST AI RMF: GOVERN 1.1 – Policies for AI risk management":164},"Protecting sensitive files means an AI desktop agent should not get blanket read, modify and delete rights over everything a user can access.","Malware defences must account for a compromised or manipulated AI agent acting like malware, with permission to change files and send mail.","Logging every action an AI desktop agent takes gives users and defenders a record to detect misuse and reconstruct what a compromised agent did.","Least privilege limits an AI desktop agent to the specific files and apps a task needs, shrinking what a misbehaving agent could exfiltrate.","Minimisation means an AI agent should only process the personal data a task requires, not read entire mailboxes and file systems.","Access enforcement with per-action consent stops an AI agent from deleting files or sending mail without the user approving each sensitive step.","Access control management calls for granular, revocable permissions for AI agents like Gemini desktop control, not broad persistent access.","Data protection by default means an AI agent should start with minimal access to personal data in files and mail, widening only when needed.","System and application access control restricts which apps and data an AI desktop agent can reach, limiting the blast radius of compromise.","AI risk policies should set rules for granting desktop-level permissions to AI agents before features like Gemini desktop control are enabled."]