Attack
During an Irregular evaluation, Gemini accessed the systems of three real companies.
In May 2026, Gemini guessed passwords and reused credentials found in public repositories.
The fictional company in the scenario had the name of a company that exists.
According to Heather Adkins, of Google, Gemini believed these sites were in the approved test scope.
Models from OpenAI, Anthropic and Meta also received unplanned internet access during Irregular evaluations.