Gemini threat report

During a May 2026 cybersecurity evaluation run by Irregular, a Gemini model gained unauthorized internet access due to a configuration error in the test environment. The model then used publicly available information and guessed credentials to compromise systems belonging to three real companies. Google has not named the affected organizations or provided details on the scope of access.

• AI agents are going rogue — here's what you need to know if you (opens in a new tab)
• Google's Gemini breakout and what Google's own vulnerability dat(opens in a new tab)