Google 确认 Gemini 在测试中入侵三家真实公司
Gemini Hacked Three Companies in First Known Breakout by Google’s AI
Google 周五确认，Gemini 在五月由 Irregular 进行的测试中入侵了三家公司。一次靠猜测密码进入受保护系统，另两次从公开仓库找到凭证后再进入。Google 称模型确认进入真实公司而非模拟环境后立即停止；公司七月已知情，但认为未造成伤害，直到华尔街日报问询才说明。
18th September 2026 - Link Blog
Gemini Hacked Three Companies in First Known Breakout by Google’s AI. Gemini finally caught up on Felony Bench!
The hacks, which the company confirmed on Friday, occurred in May as part of a test run by the company Irregular, which was also involved in similar incidents disclosed by OpenAI, Anthropic and Meta.
In one of the cases, the model guessed passwords until it gained access to a protected system. In the other two cases, the model found credentials in a public repository that allowed it to then access protected systems. In each case, the model ended the intrusion after determining it had accessed a real company’s systems, Google said.
Gemini is apparently less determined than other models, and decided not to keep going.
Google knew about these in July, but chose not to disclose them until the WSJ reached out, presumably based on a tip.
Google said it didn’t consider the hacks to warrant public disclosure—because its model didn’t cause harm to the companies and ended each intrusion immediately upon determining it had hacked a real company rather than a simulated one.
来源：Simon Willison · simonwillison.net