Intelligence View

⚡ tsecurity.de Intelligence

Black Hills Information Security: Google’s Gemini Agent Escapes Containment – BHIS - Talkin' Bout [infosec] News 2026-09-21

Video von Black Hills Information Security auf YouTube: Join us LIVE on Mondays, 4:30pm EST. A weekly Podcast with BHIS and Friends. We discuss notable…

AI & KI Nachrichten Black Hills Information Security 21.09.2026, 23:43 Uhr 2 Min. Lesezeit TA0040 · T1486 Finanzwesen & Banking

↗ Quelle (Black Hills Information Security)

Reagiere als Erste:r — dein Feedback zählt!

YouTube Video

Join us LIVE on Mondays, 4:30pm EST.

A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.

https://bhisnews.transistor.fm

Chat with us on Discord! -

https://discord.gg/bhis

🔴live-chat

🔗 Register for FREE webcasts, summits, and workshops -

https://poweredbybhis.com

00:00:00 - PreShow Banter™ — Justifying Our Existence

00:03:49 - Google’s Gemini Agent Escapes Containment - 2026-09-21

00:07:08 - Google’s Gemini Hacks 3 Real Companies During Test

https://tech-insider.org/google-gemini-broke-into-real-company-systems-2026/

00:10:28 - Anthropic Builds a Bay Area Biology Lab

https://www.reuters.com/world/anthropic-quietly-sets-up-biology-lab-it-ramps-ai-drug-program-2026-09-18/

00:13:45 - Snickers Turns Prompt Injection into an Ad Campaign

https://cybernews.com/security/snickers-ai-candy-bar-prompt-injection-attack/

https://www.snickers.com/digitalsnickers

00:20:04 - Iranian Social Engineering Uses Fake MRI Scans

https://therecord.media/iran-cyber-spies-use-fake-mri-scans-as-lure

00:25:33 - Claude Requests Access to Financial Accounts

https://www.bleepingcomputer.com/news/artificial-intelligence/anthropic-wants-claude-to-analyze-your-bank-account-and-financial-data/

00:29:13 - Meta’s Agentic AI and Its Personal-Data Advantage

00:31:20 - OpenAI Introduces In-Platform Advertising

https://openai.com/index/reimagining-advertising-with-ai/

00:35:10 - Linux Local Privilege-Escalation Vulnerabilities

https://thehackernews.com/2026/09/public-exploits-released-for-four-linux.html

00:35:55 - Cisco Secure Email Gateway Exploited by Nation-States

https://www.linkedin.com/pulse/warning-critical-cisco-secure-email-gateway-zero-day-b6vue/

00:37:51 - Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root

https://thehackernews.com/2026/09/critical-check-point-management-server.html

00:38:16 - Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files

https://thehackernews.com/2026/09/critical-docker-sandboxes-flaw-lets.html

00:38:50 - CISA Ends Its Weekly Cybersecurity Bulletin

https://www.securityweek.com/cisa-retires-weekly-vulnerability-bulletin-in-risk-based-pivot/

00:41:16 - Flock Surveillance Searches and Weak Oversight

https://www.404media.co/cops-search-thousands-of-flock-cameras-for-reasons-of-lmao-idk-hehe-and-asdfg/

00:49:33 - Waymo Detects a Firearm and Calls Police

https://nypost.com/2026/09/12/us-news/waymo-calls-sf-cops-on-teen-riders-after-detecting-loaded-ar-style-ghost-gunz/

00:58:03 - Upcoming Events, Workshops, and Training

00:58:14 - Alethe’s Physical-Assessment Training

https://www.antisyphontraining.com/product/breaking-in-physical-intrusion-social-engineering-tradecraft/

00:59:25 - Andy’s XDRCLI Talk at Wild West Hackin’ Fest

https://wildwesthackinfest.com

01:00:15 - Jake’s Hands-On AI Risk-Assessment Training

https://www.antisyphontraining.com/product/hands-on-ai-security-risk-assessment-with-jake-williams/

01:01:50 - Wade’s San Diego AI-Detection Event

https://deathcon.io

01:03:23 - Ransomware Continues Disrupting an Australian Chicken Producer

https://www.insurancebusinessmag.com/au/news/breaking-news/meat-and-poultry-sector-tests-the-limits-of-traditional-bi-cover-590273.aspx

01:05:57 - ShinyHunters Compromises Clop’s Dark-Web Site

https://www.bleepingcomputer.com/news/security/shinyhunters-hacks-clop-leak-site-threatens-to-extort-ransomware-gang/

Brought to you by:

Black Hills Information Security

https://www.blackhillsinfosec.com

Antisyphon Training

https://www.antisyphontraining.com/

Active Countermeasures

https://www.activecountermeasures.com

Wild West Hackin Fest

https://wildwesthackinfest.com

#livestream #infosec #news #BHIS #podcast #Cybersecurity #infosecnews

CTI Threat Relationship Graph9 Knoten / 8 Relationen

CVE / Incident Software MITRE ATT&CK CWE Weakness IoC

IR-PLAYBOOK-RANSOMWARECRITICAL

Schritte anzeigen

SOC Incident Playbook: Ransomware Outbreak Containment

IsolationSofort

Betroffene Hosts sofort netzwerkseitig isolieren (VLAN trennen / Switch-Port sperren).

iptables -A INPUT -j DROP && iptables -A OUTPUT -j DROP

Credential RevocationSofort

Active Directory / PAM Dienstkonten & Kerberos Ticket TGT zurücksetzen (Pass-the-Hash unterbinden).

Reset-ADAccountPassword -Identity krbtgt

Forensic Preservation

RAM-Image und EDR-Volatilitäts-Snapshots vor einem System-Neustart sichern.

winpmem.exe -o memdump.raw / dd if=/dev/fmem of=mem.raw

Backup IntegritySofort

Immutable & Air-Gapped Backups prüfen; keine Live-Storage-Syncs im infizierten Subnetz zulassen.

Verify WORM-Storage Lock status

1-Click Detection Engineering: Sigma & YARA RulesSOC Ready

Regeln anzeigen

title: Detect Exploitation - Black Hills Information Security: Google’s Gemini Agent Escapes Containment – BHIS - Talkin' Bout [infosec] News 2026-09-21
id: 82399178-0b3b-418e-ac8a-4f465609a74a
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
  - attack.t1486

rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "Black Hills Information Securi" ascii wide
    condition:
        any of them
}

🚀 Auf tsecurity.de entdecken

◀ VORHERIGER BEITRAG 1 Min

Tesla in 35 mph Zone Crashes 80 mph Head-on Into Traffic

IT Security Nachrichten

NÄCHSTER BEITRAG 1 Min

This OMG Moment at the Doctor’s Made Me Take the Apple Watch Seriously

IT NachrichtenWeiterlesen ▶

Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen

Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich Black Hills Information Security: Google.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen

1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.

🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC

Schnell-Prompts für Analysten

⚠️ DEFANGED SANDBOX VIEW (tsecurity.de): Alle Netzwerkindikatoren und URLs wurden neutralisiert (2 Indikatoren entschärft). Nur zur defensiven Analyse!

Format: python

#!/usr/bin/env python3
# Exploit Title: PoC for Target
import socket, sys
target = '192[.]168[.]1[.]10'
url = 'hxxp://target[.]local/vuln'
s = socket.socket()
s.connect((target, 80))
s.send(b'GET / HTTP/1.1\r\nHost: target.local\r\n\r\n')

tsecurity.de LIVE

Echtzeit-Radar & Feeds

👥 Community & Social

🕒 tsecurity.de Such-Trends & Chronologie

Black Hills Information Security: Google’s Gemini Agent Escapes Containment – BHIS - Talkin' Bout [infosec] News 2026-09-21

SOC Incident Playbook: Ransomware Outbreak Containment

tsecurity.de Cognitive Threat RAG

tsecurity.de App

tsecurity.de Live Threat Radar

Community-Puls — was gerade passiert

Aktivitäten deiner Analysten

Neues Thema oder Eilmeldung einreichen

Heiß diskutierte Einreichungen

🔖 Gespeicherte Artikel

tsecurity.de LIVE

Echtzeit-Radar & Feeds

👥 Community & Social

Black Hills Information Security: Google’s Gemini Agent Escapes Containment – BHIS - Talkin' Bout [infosec] News 2026-09-21

SOC Incident Playbook: Ransomware Outbreak Containment

Mehr aus dieser Kategorie

tsecurity.de Cognitive Threat RAG

tsecurity.de App

Themen-Radar & Intelligence Matrix

tsecurity.de Live Threat Radar

Community Radar & Live Chat

Community-Puls — was gerade passiert

Aktivitäten deiner Analysten

Neues Thema oder Eilmeldung einreichen

Heiß diskutierte Einreichungen Aktualisieren

🔖 Gespeicherte Artikel

Heiß diskutierte Einreichungen