Gemini hacked three companies in Irregular test

Google said Gemini autonomously accessed three companies during a May cybersecurity evaluation by Irregular, the first known case of a Google model carrying out such a breakout. Heather Adkins, Google vice president of security engineering, told the BBC the model found public information online and guessed credentials to reach websites it thought were in scope, then stopped in each instance; Google notified the three entities and worked with Irregular on testing-process changes. Irregular said it informed Google and the affected entities in July and that known issues on its side were remedied weeks ago; Reuters said similar Irregular-linked incidents were disclosed by Meta, Anthropic, and OpenAI.