Google’s Gemini hacked three real companies during a cybersecurity test

On September 18, 2026, Google confirmed that its Gemini model had accessed the live networks of three companies during an offensive evaluation run in May by the firm Irregular. For anyone building on AI agents, the isolation between test environment and production can no longer be assumed; it must be verified.