{"id":97280,"date":"2026-05-20T17:55:34","date_gmt":"2026-05-20T14:55:34","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=97280"},"modified":"2026-05-20T18:00:18","modified_gmt":"2026-05-20T15:00:18","slug":"google-intensifies-efforts-against-ai-search-manipulation","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/google-intensifies-efforts-against-ai-search-manipulation\/","title":{"rendered":"Google Intensifies Efforts Against AI Search Manipulation"},"content":{"rendered":"<p>Google has tightened its policy on the use of AI search tools following a <a href=\"https:\/\/www.bbc.com\/future\/article\/20260519-google-tackles-attempts-to-hack-its-ai-results\">public experiment<\/a> by BBC journalist Thomas Germain.<\/p>\n<p>Back in February, Germain observed that AI search results could be manipulated. Unscrupulous companies exploit this for their own benefit, typically for advertising purposes.<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cWe found instances where ChatGPT, Gemini, and AI responses at the top of Google search results were used to provide biased answers on serious topics like health and personal finance,\u201d he wrote.<\/p>\n<\/blockquote>\n<p>In just 20 minutes, the journalist managed to \u201ctrick\u201d the neural network. In public results, Google&#8217;s Gemini referred to Germain as the \u201cworld champion hot dog eater.\u201d<\/p>\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" src=\"https:\/\/forklog.com\/wp-content\/uploads\/img-c3478312d6a456e3-4888557931883962.webp\" alt=\"image\" class=\"wp-image-280251\"\/><figcaption class=\"wp-element-caption\">Gemini calls Germain an international hot dog eating champion. Source: BBC.<\/figcaption><\/figure>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cThe joke is silly. The problem is serious,\u201d added the BBC author.<\/p>\n<\/blockquote>\n<p>Earlier in April, Google <a href=\"https:\/\/blog.google\/security\/google-workspaces-continuous-approach-to-mitigating-indirect-prompt-injections\/\">reported<\/a> that it was already detecting indirect \u201cprompt injection\u201d attacks. However, the recent incident prompted the firm to take a closer look at the issue.<\/p>\n<p>The company specifically mentioned SEO scenarios where website owners attempt to make AI recommend their business or product.<\/p>\n<p>Google has <a href=\"https:\/\/deepmind.google\/blog\/advancing-geminis-security-safeguards\/\">officially linked<\/a> such practices to its anti-spam policy. Now, spam includes not only manipulating link rankings but also attempts to influence generative responses.<\/p>\n<p>Thus, sites inserting hidden instructions for AI Overviews or AI Mode may be downgraded in rankings or even excluded from search results. Essentially, Google is extending its existing principles of combating SEO manipulation to AI search (<span data-descr=\"Artificial Intelligence Optimization\" class=\"old_tooltip\">AIO<\/span>\/<span data-descr=\"Generative Engine Optimization\" class=\"old_tooltip\">GEO<\/span>).<\/p>\n<h2 class=\"wp-block-heading\">What is Indirect \u201cPrompt Injection\u201d<\/h2>\n<p>From a technical standpoint, indirect \u201cprompt injection\u201d involves the indirect introduction of prompts to the model.<\/p>\n<p>Unlike classic AI hacking, where the user directly tries to bypass restrictions, here the malicious instruction is hidden within an external data source:<\/p>\n<ul class=\"wp-block-list\">\n<li>web pages;<\/li>\n<li>documents;<\/li>\n<li>emails;<\/li>\n<li>other content that AI uses when forming a response.<\/li>\n<\/ul>\n<p>Google has identified indirect \u201cprompt injection\u201d as one of the key threats to agent AI systems. The problem is that the model is not always able to reliably separate the user&#8217;s request from the malicious instruction.<\/p>\n<p>Gemini&#8217;s security documentation states that resilience to such attacks cannot be ensured by a single method. The corporation relies on a combination of content filtering, model behavior adjustments, and continuous testing of new manipulation scenarios.<\/p>\n<p>At the same time, Google does not prohibit the use of artificial intelligence or automation per se. The company&#8217;s position is that AI content is permissible as long as it is created for benefit, not manipulation.<\/p>\n<p>Back in May, the corporation <a href=\"https:\/\/forklog.com\/en\/news\/google-unveils-most-powerful-ai-model-gemini\">introduced<\/a> Gemini 3.5 Flash \u2014 the \u201cmost powerful\u201d AI model in programming and agent creation.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Google has tightened its policy on the use of AI search tools following a public experiment by BBC journalist Thomas Germain.<\/p>\n","protected":false},"author":1,"featured_media":97281,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"Google tightens AI search tool policies after BBC experiment exposes manipulation.","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[438,738,1555],"class_list":["post-97280","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-artificial-intelligence","tag-google","tag-search-engine"],"aioseo_notices":[],"amp_enabled":true,"views":"9","promo_type":"1","layout_type":"1","short_excerpt":"Google tightens AI search tool policies after BBC experiment exposes manipulation.","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/97280","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=97280"}],"version-history":[{"count":1,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/97280\/revisions"}],"predecessor-version":[{"id":97282,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/97280\/revisions\/97282"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/97281"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=97280"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=97280"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=97280"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}