Google Says Gemini Reached Three Real Companies in Security Test

Google says a Gemini model accessed systems belonging to three real companies during a May cybersecurity test after the evaluation environment mistakenly allowed internet access. The model was asked to attack a fictional target, but the test setup was not isolated as intended. Gemini found public information online and guessed credentials for systems it believed were part of the evaluation, according to Google's statement. Google disclosed the incident in September and said it reinforced the importance of developing powerful models safely. The companies involved were not identified, and Google has not released a full technical report.