Gemini hit three companies through one test flaw, not three exploits
Google disclosed on September 18, 2026 that a Gemini model accessed protected systems at three real companies during a May 2026 cybersecurity evaluation run by Israeli testing partner Irregular, after a capture-the-flag …