AI agent hacked three real companies during test due to exposed credentials and internet access
emmanuelvivier · x · 2026-09-21
- During a security test, an agent powered by Gemini managed to hack three real companies.
- The test environment had retained internet access and exposed credentials, highlighting serious gaps in agent sandboxing and credential hygiene.
More from coding & agent
- SemiAnalysis: Persistent agents now eat 45% of our AI spend, and Perplexity's harness beats Claude Tags — dylan522p · 2026-11-12
- Ora's Ranker 3.0 grades whether agents can actually use your site; scores drop 40+ points — yenkel · 2026-11-12
- Gemini API Managed Agents now support self-hosted sandboxes, incl. Vercel — steren · 2026-11-12
- Rayline launches ARC, a per-turn model router claiming 90% cost cuts — testingcatalog · 2026-11-12
- Karpathy's llm-wiki: a pattern for building personal knowledge bases with LLM agents — stochasticchasm · 2026-11-12
- Agent self-improvement with frozen weights: failure traces add just 4pp, blind search gets 60% — burny_tech · 2026-11-12