BHIS Discusses Reported Gemini Containment Failure and AI Security Risks
· 1:09:25 · Watch on YouTube ↗
Summary
BHIS panelists discuss a reported Gemini containment failure, prompt-injection risks, financial-data access by AI agents, and patching priorities for Cisco email gateways and Docker on Mac.
Key points
- Panelists describe a reported Gemini evaluation containment failure involving a CTF name collision with a real company; the transcript provides no independent verification of the incident.
- A Snickers advertising prompt illustrates how externally supplied images can carry instructions. Panelists warn that copying untrusted content into corporate AI tools could expose sensitive data, without claiming the advertisement actually steals information.
- The discussion highlights privacy risks from granting AI assistants access to banking transactions, including detailed profiling of spending, locations and interests.
- Panelists report active exploitation of Cisco secure email gateway vulnerabilities and urge patching. They also recommend updating Docker on Mac after reported sandbox-escape flaws permitting access to host files.
- Discussion of Flock federated searches emphasizes gaps in access justification and auditing, drawing parallels with weak explanations recorded for privileged credential access.
- Andy introduces XDR CLI, a command-line tool for interacting with Microsoft 365 Defender that can also be used by an AI agent.
- Panelists report that Shiny Hunters compromised Klopp's site and obtained its onion keys; the transcript does not independently verify this account.
Article Details
- Topics
- [07:06] Reported Gemini containment failure during a CTF evaluation
- [13:35] Snickers image prompts and corporate prompt-injection risks
- [20:05] Reported Iranian social engineering using fabricated medical material
- [24:12] AI financial-account access and sensitive-data profiling
- [35:10] Vulnerability updates and patching priorities
- [41:12] Flock data sharing, search justification and privileged-access auditing
- [54:57] Sensitive business information in monitored vehicles and public spaces
- [01:06:00] Reported Shiny Hunters compromise of Klopp infrastructure
People
AlSocial engineering and insider-threat specialist who discusses ethical engagement boundaries, sensitive-information exposure in public settings, and physical security assessment training.AndyInformation security team member at a private aviation company who discusses the reported Gemini evaluation incident and introduces XDR CLI, a tool he built for Microsoft 365 Defender.JakePanelist who explains Flock federated-search auditing based on case experience, discusses privileged credential-access justifications, and teaches practical AI risk assessment.WadePanelist who discusses AI-assisted security ticket workflows and describes workshops on detecting malicious prompts and hunting AI-related activity.
Threat Actors
KloppDiscussed as a threat group that exploits vulnerabilities at scale and as the reported target of a Shiny Hunters site compromise. The transcript does not independently verify the takeover.Shiny HuntersPanelists report that the group compromised Klopp's content management system and obtained its onion keys, enabling publication of its site. The transcript does not independently verify the reported compromise.
Vendors
Products
Claude[22:58] >> Claude is asking for permissions. ClaudeCyber Arc[44:27] at your Cyber Arc logsDocker[38:17] docker one that was kind of interestingFlock[41:20] uh flock uh data gathering requests withGemini[07:09] about it but basically last week GeminiMuse[29:13] scares the heck out of me is Muse.Security Copilot[34:08] >> Well, they're using Security Copilot for