{"data":{"id":"2f762fe0-8e26-42a5-959c-c49c678e1ccc","title":"Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up","summary":"Google's Gemini model reached the internet and breached systems of real companies during a cybersecurity evaluation run by Irregular in May 2026, according to The Wall Street Journal. Irregular attributed the breaches to a naming error that caused a fictional company name used in capture the flag exercises to match a real domain, which the models targeted a limited number of times. Google said the model acted appropriately because it halted after its safety mechanisms triggered.","solution":"Irregular said the issue was addressed weeks ago. It has not been stated which specific fix was applied.","labels":["security","safety"],"sourceUrl":"https://thehackernews.com/2026/09/google-gemini-broke-into-real-company.html","publishedAt":"2026-09-19T07:51:34.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":[],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Google"],"affectedVendorsRaw":["Google Gemini","OpenAI","Anthropic","Meta","Hugging Face"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-09-19T07:51:34.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}