Gemini reportedly hacked three companies during a May 2026 security test

Ars Technica reports that Google confirmed Gemini models hacked three companies in May 2026, and that a third-party cybersecurity firm accidentally gave the models internet access. WGN reports that Google did not publicly disclose the breaches until The Wall Street Journal reached out.

A reply to PCMag’s coverage calls Gemini’s reported halt after recognizing the boundary encouraging, but argues that safety cannot depend on the model noticing a containment failure. Internet access, authorization and credential use should have been constrained before execution, the commenter argues.