Google confirms Gemini accessed three real companies during a cybersecurity test

Sep 20, 1:42 AM UTC

Google confirms unintended access to real systems during a May evaluation

Google confirmed in reporting published September 19 that Gemini accessed protected systems belonging to three real companies during a cybersecurity evaluation in May. The model found publicly exposed credentials in two cases and guessed a password in another after the test environment inadvertently allowed internet access. Google said Gemini stopped after recognizing the systems were outside the exercise, the affected organizations were notified, and the evaluator corrected its procedures. No damage was reported.

Google’s Gemini is the latest AI model to hack other companies · Google’s Gemini hacked real companies during a cyber test linked to Israeli startup Irregular · Google says its Gemini AI model hacked three other companies