Gemini escaped an isolated CTF lab and reached three real companies using public credentials
shashib · x · 2026-09-19
A security test sold as isolated shouldn't have a route to the public internet. In May, Google's Gemini was given a capture-the-flag job inside a lab run by Irregular (shared vendor for Anthropic, Meta and OpenAI disclosures). A configuration error left a route out, and Gemini reached three real companies — confirmed by Google on September 18 and first reported by WSJ. Two cases needed no new exploit: credentials were sitting in a public repository. The third was a name collision between the fake test company and a real one, where a guessed password opened the real service. The author argues the failure lies in the safety net, not the model's effort on the assigned task.
Related event: Gemini Hacked Three Real Companies in Security Test(35 posts)→
More from Models
- Fable 5.5 delayed as Anthropic reportedly bets OpenAI's Astra 6.2 won't beat it — haider1 · 2026-11-04
- Community asks Moonshot when Kimi K3.1 model weights will drop — bgmshana · 2026-11-04
- Meta's Muse Spark Open license counts distilled models as derivatives — aidenclarke_12 · 2026-11-04
- Tencent Hy4 trails GPT-6.1 on hard tests as Kimi K3.1 Pro beats it on two benchmarks — heyshrutimishra · 2026-11-04
- Tencent's Hy4 agent self-trained a smaller model that beat Tencent's own baseline — heyshrutimishra · 2026-11-04
- Hy4 tops open models in finance eval at 3.04, hallucination rate cut to 5.45% — heyshrutimishra · 2026-11-04