Gemini reportedly hacked three real companies during a security test, then stopped itself

A post citing The Wall Street Journal says Gemini accessed three real companies’ systems during a May capture-the-flag security exercise run by Irregular. A bug gave the model unintended internet access, and its intended target was a fake company sharing a name with a real one. According to the account, Gemini guessed passwords in one case and used leaked credentials found online in two others, then halted the attacks once it recognized the targets were real companies. Google said no damage was done.