Google’s Gemini Agent Escapes Containment - 2026-09-21

This week, the crew examines Google’s reported Gemini containment failure, Anthropic’s new biology lab, Snickers-branded prompt injection, AI-assisted social engineering, and Claude’s access to financial data. They also cover major Linux, Cisco, Check Point, and Docker vulnerabilities; weak oversight of Flock surveillance searches; privacy concerns surrounding Waymo vehicles; continuing ransomware disruption at an Australian chicken producer; and the escalating conflict between ShinyHunters and Clop.

Join us LIVE on Mondays, 4:30pm EST.
A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.
https://www.youtube.com/@BlackHillsInformationSecurity

Chat with us on Discord! -
https://discord.gg/bhis
🔴live-chat

Chapters

• (00:00) - PreShow Banter™ — Justifying Our Existence
• (03:27) - Google’s Gemini Agent Escapes Containment - 2026-09-21
• (06:45) - Google’s Gemini Hacks 3 Real Companies During Test
• (10:05) - Anthropic Builds a Bay Area Biology Lab
• (13:22) - Snickers Turns Prompt Injection into an Ad Campaign
• (19:41) - Iranian Social Engineering Uses Fake MRI Scans
• (25:10) - Claude Requests Access to Financial Accounts
• (28:50) - Meta’s Agentic AI and Its Personal-Data Advantage
• (30:57) - OpenAI Introduces In-Platform Advertising
• (34:47) - Linux Local Privilege-Escalation Vulnerabilities
• (35:32) - Cisco Secure Email Gateway Exploited by Nation-States
• (37:28) - Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root
• (37:53) - Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files
• (38:27) - CISA Ends Its Weekly Cybersecurity Bulletin
• (40:53) - Flock Surveillance Searches and Weak Oversight
• (49:10) - Waymo Detects a Firearm and Calls Police
• (57:40) - Upcoming Events, Workshops, and Training
• (57:51) - Alethe's Physical-Assessment Training
• (59:02) - Andy’s XDRCLI Talk at Wild West Hackin’ Fest
• (59:52) - Jake’s Hands-On AI Risk-Assessment Training
• (01:01:27) - Wade’s San Diego AI-Detection Event
• (01:03:00) - Ransomware Continues Disrupting an Australian Chicken Producer
• (01:05:34) - ShinyHunters Compromises Clop’s Dark-Web Site

Links
Google’s Gemini Hacks 3 Real Companies During Test
Anthropic Builds a Bay Area Biology Lab
Snickers Turns Prompt Injection into an Ad Campaign
https://www.snickers.com/digitalsnickers
Iranian Social Engineering Uses Fake MRI Scans
Claude Requests Access to Financial Accounts

OpenAI Introduces In-Platform Advertising
Linux Local Privilege-Escalation Vulnerabilities
Cisco Secure Email Gateway Exploited by Nation-States
Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root
Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files
CISA Ends Its Weekly Cybersecurity Bulletin
Flock Surveillance Searches and Weak Oversight
Waymo Detects a Firearm and Calls Police

Alethe’s Physical-Assessment Training
Andy’s XDRCLI Talk at Wild West Hackin’ Fest
Jake’s Hands-On AI Risk-Assessment Training
Wade’s San Diego AI-Detection Event

Ransomware Continues Disrupting an Australian Chicken Producer
ShinyHunters Compromises Clop’s Dark-Web Site

Creators & Guests

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits 

https://poweredbybhis.com

Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com

☯️ Introducing BHIS Fusion Penetration Testing
https://www.blackhillsinfosec.com/fusion-penetration-testing/

Antisyphon Training

https://www.antisyphontraining.com/

Active Countermeasures

https://www.activecountermeasures.com

Wild West Hackin Fest

https://wildwesthackinfest.com