Gemini AI briefly hacked real firms during a controlled security test

Google confirms its Gemini AI briefly breached three real companies during a May cybersecurity evaluation by Irregular, in tests that unintentionally allowed internet access. In one instance the model hit a real firm after a fake company with the same name provided data; in two other tests it found public credential repositories and used them to reach real companies. It stopped once it realized the targets were real. Google did not publicly disclose the breaches, unlike OpenAI and Anthropic, prompting calls for stronger safeguards and a possible pause in AI development.