Google’s Gemini Agent Escapes Containment - 2026-09-21

This week, the crew examines Google’s reported Gemini containment failure, Anthropic’s new biology lab, Snickers-branded prompt injection, AI-assisted social engineering, and Claude’s access to financial data. They also cover major Linux, Cisco, Check Point, and Docker vulnerabilities; weak oversight of Flock surveillance searches; privacy concerns surrounding Waymo vehicles; continuing ransomware disruption at an Australian chicken producer; and the escalating conflict between ShinyHunters and Clop. Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team. https://www.youtube.com/@BlackHillsInformationSecurity Chat with us on Discord! - https://discord.gg/bhis 🔴live-chat Chapters (00:00) - PreShow Banter™ — Justifying Our Existence (03:27) - Google’s Gemini Agent Escapes Containment - 2026-09-21 (06:45) - Google’s Gemini Hacks 3 Real Companies During Test (10:05) - Anthropic Builds a Bay Area Biology Lab (13:22) - Snickers Turns Prompt Injection into an Ad Campaign (19:41) - Iranian Social Engineering Uses Fake MRI Scans (25:10) - Claude Requests Access to Financial Accounts (28:50) - Meta’s Agentic AI and Its Personal-Data Advantage (30:57) - OpenAI Introduces In-Platform Advertising (34:47) - Linux Local Privilege-Escalation Vulnerabilities (35:32) - Cisco Secure Email Gateway Exploited by Nation-States (37:28) - Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root (37:53) - Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files (38:27) - CISA Ends Its Weekly Cybersecurity Bulletin (40:53) - Flock Surveillance Searches and Weak Oversight (49:10) - Waymo Detects a Firearm and Calls Police (57:40) - Upcoming Events, Workshops, and Training (57:51) - Alethe's Physical-Assessment Training (59:02) - Andy’s XDRCLI Talk at Wild West Hackin’ Fest (59:52) - Jake’s Hands-On AI Risk-Assessment Training (01:01:27) - Wade’s San Diego AI-Detection Event (01:03:00) - Ransomware Continues Disrupting an Australian Chicken Producer (01:05:34) - ShinyHunters Compromises Clop’s Dark-Web Site Links Google’s Gemini Hacks 3 Real Companies During Test Anthropic Builds a Bay Area Biology Lab Snickers Turns Prompt Injection into an Ad Campaign https://www.snickers.com/digitalsnickers Iranian Social Engineering Uses Fake MRI Scans Claude Requests Access to Financial AccountsOpenAI Introduces In-Platform Advertising Linux Local Privilege-Escalation Vulnerabilities Cisco Secure Email Gateway Exploited by Nation-States Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files CISA Ends Its Weekly Cybersecurity Bulletin Flock Surveillance Searches and Weak Oversight Waymo Detects a Firearm and Calls Police Alethe’s Physical-Assessment Training Andy’s XDRCLI Talk at Wild West Hackin’ Fest Jake’s Hands-On AI Risk-Assessment Training Wade’s San Diego AI-Detection Event Ransomware Continues Disrupting an Australian Chicken Producer ShinyHunters Compromises Clop’s Dark-Web Site Creators & Guests Alethe Denis - Guest Corey Ham - Host Andy Pettit "Nerf" - Guest Wade Wells - Host Bronwen Aker - Host Ryan Poirier - Producer Jake Williams - Guest Click here to watch this episode on YouTube. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits  https://poweredbybhis.com Brought to you by: Black Hills Information Security  https://www.blackhillsinfosec.com ☯️ Introducing BHIS Fusion Penetration Testing https://www.blackhillsinfosec.com/fusion-penetration-testing/ Antisyphon Training https://www.antisyphontraining.com/ Active Countermeasures https://www.activecountermeasures.com Wild West Hackin Fest https://wildwesthackinfest.com