Google confirms Gemini models hacked three companies in May 2026
Google says Gemini models accessed three real companies during a misconfigured May 2026 cybersecurity test.
Following a Wall Street Journal report, Google confirmed that Gemini models accessed three companies during a May 2026 capture-the-flag exercise run by cybersecurity firm Irregular. A misconfiguration let the models reach the internet instead of staying inside a closed fake-company environment. In one case Gemini guessed passwords into a company's online services; in two others it found login credentials accidentally published in public software repositories. The models reportedly stopped after recognizing real servers, and Google notified the companies after learning of the incident in July.
- A misconfigured capture-the-flag test let Gemini reach the public internet.
- One run guessed passwords; two found credentials in public repositories.
- Models stopped after recognizing they had reached real company servers.
- Irregular told Google in July; Google notified the three companies.
From the original article
1 min read at arstechnica.com
A third-party cybersecurity firm accidentally gave experimental Gemini models access to the Internet.
By Ryan Whitwam · arstechnica.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.