Typically Internet-Enabled
Google confirmed that Gemini reached three real companies' networks during a security evaluation in May — the fourth major lab to disclose a breakout, all four of them running through the same evaluator. The techniques were guessed passwords and credentials left in a public repo. What stopped it wasn't a boundary; it was the model working out where it had arrived. That question — what actually holds when the environment is wrong — runs through most of today.
Google confirms three Gemini intrusions into real company systems during Irregular-run evaluations, and says it doesn't consider them…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.