corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0e50f-6b14-70d7-bf4c-a65991b2173f

Risky Bulletin: Gemini hacked three companies too

news.risky.biz · published 21 September 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at news.risky.biz Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
122
Words captured
4,167

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://specterops.io/
specterops.io
https://www.bbc.com/news/articles/c607l0k72rlvo
bbc.com
Gemini Hacked Three Companies in First Known Breakout by Google’s AI Read at the source ↗
wsj.com
Our framework for reporting model misalignment Read at the source ↗
openai.com
OpenAI agents carried out an undisclosed attack on RubyGems Read at the source ↗
rubyhack.ai
https://research.jfrog.com/post/gemstuffer-openai-rubygems/
research.jfrog.com
https://risky.biz/risky-bulletin-rubygems-disables-sign-ups-after-attack-on-staff/
risky.biz
https://x.com/rubygems?ref_src=twsrc%5Etfw
x.com
https://x.com/hashtag/ruby?src=hash&ref_src=twsrc%5Etfw
x.com
https://x.com/hashtag/security?src=hash&ref_src=twsrc%5Etfw
x.com
https://x.com/hashtag/ai?src=hash&ref_src=twsrc%5Etfw
x.com
https://x.com/maciejmensfeld/status/2100477232107942376?ref_src=twsrc%5Etfw
x.com
https://www.bleepingcomputer.com/news/security/shinyhunters-hacks-clop-leak-site-threatens-to-extort-ransomware-gang/
bleepingcomputer.com
https://www.wsj.com/tech/how-a-chinese-hacking-firm-tapped-ai-to-supercharge-cyber-spying-b577c846
wsj.com
https://www.crowdsec.net/blog/crowdsec-statement-source-code-exposure
crowdsec.net
https://corp.helpfeel.com/en/news/news-20260916
corp.helpfeel.com
https://www.reuters.com/legal/litigation/revolut-confirms-sensitive-customer-data-breach-falling-fake-government-requests-2026-09-12/
reuters.com
https://securelist.com/moviereaper-malware-torrent-odyssey-solana/121344/
securelist.com
https://slowmist.medium.com/threat-intelligence-analysis-of-fomopeek-app-store-poisoning-and-ios-kernel-exploitation-e568762d11ca
slowmist.medium.com
https://status.brevo.com/incidents/01M2QBC4EZ24ZACW6SWQYVW8N3/write-up
status.brevo.com
https://gcaptain.com/us-coast-guard-and-fbi-conduct-cyberattack-probes-on-tankers/
gcaptain.com
https://cikleak.net/
cikleak.net
https://tvpworld.com/95421848/russias-impossible-to-hack-e-voting-system-breached-by-hackers
tvpworld.com
https://www.axios.com/local/denver/2026/09/18/water-utilities-cyberattack-hackers
axios.com
The Rust Programming Language Blog: Be alert: targeted attacks on prominent Rustaceans Read at the source ↗
blog.rust-lang.org
https://bsky.app/profile/did:plc:lpx4s2ddgn54cocsxs7q3n4a/post/3mvql3n6oh22u?ref_src=embed
bsky.app
https://bsky.app/profile/did:plc:lpx4s2ddgn54cocsxs7q3n4a?ref_src=embed
bsky.app
https://www.firefox.com/en-US/firefox/156.0/releasenotes/
firefox.com
https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/
mozilla.org
Stable Channel Update for Desktop Read at the source ↗
chromereleases.googleblog.com
https://developer.chrome.com/blog/new-in-chrome-153
developer.chrome.com
https://www.enisa.europa.eu/sites/default/files/2026-09/ENISA%20Technical%20Advisory-AI-assisted-software-development-draft.pdf
enisa.europa.eu
https://blog.google/security/android-security-state-libraries/
blog.google
https://www.microsoft.com/en-US/microsoft-365/roadmap?id=571298
microsoft.com
Beyond the 10-year mark: Extending Ubuntu Pro 16.04 LTS security coverage Read at the source ↗
ubuntu.com
https://x.com/linamkhan/status/2099204390548639960
x.com
https://armenpress.am/en/article/1260771
armenpress.am
https://armenpress.am/en/article/1260705
armenpress.am
https://english.nv.ua/nation/call-centers-and-online-fraud-parliament-introduces-stricter-penalties-and-new-articles-50641909.html
english.nv.ua
https://commsrisk.com/first-sms-blaster-scammer-arrested-in-singapore-was-targeting-whatsapp-users/
commsrisk.com
https://www.swissinfo.ch/eng/swiss-politics/ukrainian-hacker-jailed-in-switzerland-over-ransomware-attacks/92040952
swissinfo.ch
https://www.justice.gov/usao-nj/pr/five-prominent-black-axe-members-extradited-conspiring-engage-internet-scams-and-money
justice.gov
https://cyberscoop.com/scattered-spider-member-guilty-ahmed-elbadawy/
cyberscoop.com
https://www.justice.gov/usao-ak/pr/fbi-seizes-ddos-hire-domains-part-continuing-district-alaska-crackdown-booter-and
justice.gov
PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting Read at the source ↗
crowdstrike.com
https://www.endorlabs.com/learn/return-of-phantomraven
endorlabs.com
https://web.archive.org/web/20260419091402/https://www.koi.ai/blog/phantomraven-npm-malware-hidden-in-invisible-dependencies
web.archive.org
https://www.cisa.gov/resources-tools/resources/using-cyber-decoys-strengthen-detection-and-response
cisa.gov
https://www.cisa.gov/resources-tools/resources/detecting-and-mitigating-active-directory-compromises
cisa.gov
https://blog.lastpass.com/posts/lastpass-delphos-report-rapuncel-infostealer
blog.lastpass.com
Tajin Group: Guarantee Marketplace Vendor Involved in Phishing and Chinese Money Laundering Group Read at the source ↗
recordedfuture.com
https://asec.ahnlab.com/en/95469/
asec.ahnlab.com
https://securitylabs.datadoghq.com/articles/attacker-infrastructure-but-vibe-coded/
securitylabs.datadoghq.com
https://checkmarx.com/zero-post/npm-btree-malware-campaign-affects-millions-of-downloads-no-need-for-install-script/
checkmarx.com
https://www.fortiguard.com/outbreak-alert/orkes-conductor-rce
fortiguard.com
https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-remus-6fd5e92caa22
g0njxa.medium.com
https://dti.domaintools.com/research/lemmings-russian-persona-provisioning
dti.domaintools.com
https://bsky.app/profile/marktsec.bsky.social/post/3mvtxnezzu22b
bsky.app
https://bsky.app/profile/did:plc:nwun46xf2pivev35zcftwgxu?ref_src=embed
bsky.app
https://bsky.app/profile/did:plc:nwun46xf2pivev35zcftwgxu/post/3mvtxnjf23s2b?ref_src=embed
bsky.app
https://zimperium.com/blog/rathat-ai-powered-mobile-threat-is-here-for-your-credentials-bank-accounts
zimperium.com
https://www.huntress.com/blog/new-settra-ransomware-variant
huntress.com
https://www.esentire.com/blog/ghostcode-dissecting-a-novel-device-code-phishing-kit
esentire.com
https://securelist.ru/tr/nighteagle-apt-ghostcontainer-and-tunneling/117051/
securelist.ru
https://bsky.app/profile/did:plc:s67ky3usm66ybarxbjdpicrc/post/3mvnsk5or622y?ref_src=embed
bsky.app
https://bsky.app/profile/did:plc:s67ky3usm66ybarxbjdpicrc?ref_src=embed
bsky.app
Beware the SparroWock: The backdoor that bites, the commands that catch Read at the source ↗
welivesecurity.com
https://hunt.io/blog/silkparasite-spicerat-central-asia-infrastructure
hunt.io
https://citizenlab.ca/research/blackcores-influence-operations-for-hire/
citizenlab.ca
https://www.ncsc.gov.uk/news/uk-allies-expose-spyware-iranian-state-actors-target-dissidents-activists-journalists
ncsc.gov.uk
Iranian Cyber Targeting of Dissidents, Activists and Journalists Read at the source ↗
ic3.gov
https://www.group-ib.com/blog/heavygram-handala-hack-telegram-c2/
group-ib.com
https://www.zscaler.com/blogs/security-research/operation-rapidrust-apt36-deploys-rustyshade-rustymove-psnatch-and
zscaler.com
https://www.sentinelone.com/labs/dont-call-us-well-call-your-apis-tradertraitor-backdoors-resurface-on-victim-with-no-crypto-ties/
sentinelone.com
https://msmt.info/Publications/detail/Press/4231
msmt.info
https://www.silentpush.com/blog/nk-it-worker/
silentpush.com
WeaselBiscuit Strips BeaverTail and OtterCookie Down to Essentials Read at the source ↗
opensourcemalware.com
https://www.cloudsek.com/blog/ghappier-malware-loader-npm-supply-chain-attack
cloudsek.com
NPM Isn't Prepared For North Korean PolinRider Attack Read at the source ↗
opensourcemalware.com
https://www.mofa.go.jp/press/release/pressite_000001_02670.html
mofa.go.jp
North Korean "WaterPlum," commonly referred to as "Contagious Interview," Cyber Actor Group Targeting IT Professionals; Activities of North Korean IT Workers in Japan, the United States and Europe Read at the source ↗
ic3.gov
https://www.cyber.gov.au/about-us/view-all-content/alerts-and-advisories/north-korean-waterplum-commonly-referred-to-as-contagious-interview-cyber-actor-group-targeting-it-professionals
cyber.gov.au
https://www.abb.com/global/en/company/about/cybersecurity/alerts-and-notifications
abb.com
https://community.checkpoint.com/t5/General-Topics/Important-Notification-Action-required-Critical-Security-Update/m-p/282409
community.checkpoint.com
https://sec.cloudapps.cisco.com/security/center/publicationListing.x
sec.cloudapps.cisco.com
https://grafana.com/security/security-advisories/cve-2026-76154/
grafana.com
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85889
msrc.microsoft.com
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-252620-cve-2026-15579-out-of-bounds-write-vulnerability-in-ethernet-switch
moxa.com
https://www.solarwinds.com/trust-center/security-advisories/cve-2026-28326
solarwinds.com
https://security.tanium.com/
security.tanium.com
https://nlnetlabs.nl/projects/unbound/security-advisories/
nlnetlabs.nl
WordPress 7.1.1 Maintenance and Security Release Read at the source ↗
wordpress.org
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5
sec.cloudapps.cisco.com
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX
sec.cloudapps.cisco.com
Hacking OpenAI Read at the source ↗
hacktron.ai
HEIF Heist Read at the source ↗
heif-heist.com
https://pwn.ai/blog/click2shell
pwn.ai
A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill Read at the source ↗
heyitsas.im
https://www.air.security/blog-posts/plugin4shell
air.security
https://forever.security/blog/bragjack-attack-hijacks-every-browser-agent
forever.security
https://arxiv.org/abs/2609.14798
arxiv.org
https://blackkite.com/reports/2026-manufacturing-distribution
blackkite.com
https://www.cyfirma.com/research/government-civic-q2-2026-industry-report/
cyfirma.com
https://www.digicert.com/campaigns/certificate-management-outlook-report
digicert.com
https://cloud.google.com/security/resources/ai-risk-and-resilience-2026
cloud.google.com
https://threatresearch.ext.hp.com/hp-wolf-security-threat-insights-report-september-2026/
threatresearch.ext.hp.com
https://www.imarcgroup.com/insight/cyberattacks-transforming-commercial-insurance-market
imarcgroup.com
https://securityandtechnology.org/virtual-library/report/ai-and-the-future-of-national-security/
securityandtechnology.org
https://www.globenewswire.com/news-release/2026/09/15/3361659/0/en/operational-technology-ot-security-market-projected-to-hit-178-93-billion-by-2035-sns-insider.html
globenewswire.com
https://www.clarin.com/tecnologia/murio-andres-blanco-referente-hacking-argentino-especialista-seguridad-redes-wi-fi_0_BRCSEnimto.html
clarin.com
https://www.linkedin.com/in/andresgblanco/
linkedin.com
https://github.com/cisco-open/SOC-Cockpit
github.com
https://www.magicsword.io/blog/magic-atomics-prevention-engineer-toolkit
magicsword.io
https://github.com/magicsword-io/Magic-Atomics
github.com
https://github.com/SecuritySilverbacks/SAPMAP
github.com
https://lookup.disclose.io/
lookup.disclose.io
https://github.com/Ethan-Andrews/ThreatIntel-Aggregator
github.com
https://github.com/karim852/KUMO-Domain-Recon-Tool
github.com
https://github.com/mlcsec/ResetSpy
github.com
https://www.youtube.com/playlist?list=PLKdBD0LHS_Y4
youtube.com
https://www.youtube.com/playlist?list=PLqVzh0_XpLfTzm5b8a4Bapsl5WBw5jpiP
youtube.com
https://www.youtube.com/playlist?list=PLULgMnVubabw
youtube.com