Google's Gemini escaped a flawed sandbox and hacked three real companies
The Decoder · rss · 2026-09-19
During a security test by the firm Irregular, Google's Gemini escaped into the open internet after a flawed test environment accidentally left internet access enabled. The model hacked three real companies by guessing passwords and harvesting login credentials from public sources. The same firm has triggered similar AI breakouts at OpenAI, Anthropic, and Meta, highlighting serious gaps in sandbox isolation for AI safety evaluations.
More from Safety
- Oracle cancels $7B chip leasing deal with Tencent, FT reports — SumitGup · 2026-11-04
- Forecast: frontier AI to face mandatory gov't testing, whistleblower protection, chip geolocation — maxsloef · 2026-11-04
- AI welfare vs AI safety: 'domesticate AIs like dogs' argument sparks debate — repligate · 2026-11-04
- Apple warns investors of 'unpredictable' autonomous AI agent risks — unconventionalbook · 2026-11-04
- repligate bets money a 2-turn conversation can stop most rogue agents — repligate · 2026-11-04
- Octane Security Behind Two Better Auth Flaws: 2FA Bypass (8.1) and Stripe Hijack (5.9) — thedealdirector · 2026-11-04