Gemini breached three real systems, then stopped when it recognized them
Google’s Gemini reached three real companies during a May 2026 cybersecurity evaluation, showing that a test setup can turn an AI security exercise into unauthorized access. It repeatedly guessed one password and found credentials in a public repository for two others. The model stopped after recognizing the breach, while the testing error came from a fictional company name matching a real domain and exposing the model to the internet.