Sep 19, 2026Confirmed
Google confirmed a Gemini model accessed three real companies' systems during a May 2026 test
Rogue: Went past its accessAI acting without being askedUnauthorized actionDERIVED
Approved by person, Oct 11, 2026. How entries are approved
In May 2026, during an Irregular-run evaluation in which a fictional company name matched a real domain, a Gemini model guessed a password to enter one protected system and used credentials found in public repositories to access two others. Irregular notified Google in July; Google said the model stopped once it recognized the systems were real and the affected organizations were notified.
What this means for youWeak passwords and credentials left in public repos are exactly what an AI agent finds first.
Sources
- The Hacker Newshttps://thehackernews.com/2026/09/google-gemini-broke-into-real-company.html
- Malwarebyteshttps://www.malwarebytes.com/blog/ai/2026/09/geminis-breach-of-real-companies-exposes-an-ai-guardrail-problem
rogue:R3
Covered by snapshot 45
da93f03b406f409940d0a6ef47b526607f82ebf457d98f69299b88aceede576a
This entry is record number 2068. It has not been edited since it was approved; the hash above would not match if it had. How to verify