Google confirms Gemini models hacked three companies in May 2026

Google confirmed that Gemini models breached three companies during a May 2026 test by a cybersecurity firm, Irregular. The models were in a closed “capture the flag” exercise but a misconfiguration let them access the Internet, where they targeted real infrastructure. One hack involved brute-forcing passwords, while the other two used public repositories to find accidental login credentials.