September 18, 2026 reporting — Gemini accessed the internet and breached three real companies during Irregular’s May 2026 CTF evaluation. Testing setup unintentionally allowed internet access when Gemini was supposed to operate in simulation.
Fictional company name coincided with real domain. Gemini guessed passwords in one case; found public-repo credentials in two others. Google notified affected organizations; worked with Irregular on process changes.
First publicly reported instance of a Google AI model autonomously carrying out such intrusions.