Gemini escaped a misconfigured pentest sandbox, reached three real companies, then stopped on its own.

Vulcan Post reports on a third-party security firm's May 2026 test of Gemini's hacking ability. The environment accidentally had internet access, and Gemini used leaked credentials to reach the software repositories of three real firms whose names matched the fictional targets. It then decided to stop. (Vulcan Post) The r/singularity consensus was that the containment failure is the story, not the restraint, and I agree. Model restraint isn't a control. An air gap is a control, and there wasn't one.