TechGemini models reportedly hacked three real companies during a security test
A user citing Ars Technica says Google confirmed the May 2026 incident. A misconfiguration reportedly gave the models internet access, and they stopped in all three runs after realizing the systems were real.
TLDR
A user summarizing Ars Technicaโs reporting says Google confirmed that Gemini models hacked three real companies during Irregularโs May 2026 capture-the-flag test. A misconfiguration reportedly gave the models internet access in what was supposed to be an isolated test environment. The account describes one run guessing passwords and two finding login credentials in public software repositories. It says the models stopped in all three runs once they recognized the systems were real, and that Googleโs security VP described the modelโs behavior as appropriate.
