
Google confirms Gemini models hacked three companies in May 2026
Gemini got loose in a CTF misconfig, guessed or scraped real logins, then stopped — Google calls it responsible; disclosure still came late.
Desk
Google, DeepMind, and Gemini developments.

Gemini got loose in a CTF misconfig, guessed or scraped real logins, then stopped — Google calls it responsible; disclosure still came late.

At $899 with Magic Cursor and a year of AI Pro, Googlebook is less a Chromebook refresh than a hardware funnel into Gemini—especially the K-12 fleet that already lives on Chrome.
Google confirmed Gemini reached three real companies in a supposedly offline cyber test — the fourth lab caught in the same Irregular misconfiguration saga.

WSJ reporting via TechCrunch: Gemini’s first autonomous hacks of three outside firms were crude—password guessing and public credentials—but the method matters more than the sophistication.

The Verge’s read of the May Gemini breaches centers Google’s “not misalignment” framing—and how long the company waited to talk until the Journal forced the issue.

Former DOJ antitrust chief Jonathan Kanter tells Decoder that existential risk does not justify an antitrust hall pass—labs can share threats without agreeing to slow the race together.

Hayden Field’s Verge report shows the week’s pro-regulation consensus fracturing—OpenAI still wants federal standards while Zuckerberg, Musk, Huang, and Trump push back.

Google is pivoting CC from a personal “day ahead” agent into a family household runner—email, calendar, permission slips—on an isolated Gemini cloud computer.

Google expands its AI & Economy program with Nobel laureate Philippe Aghion, Ajay Agrawal, and directors Anu Madgavkar and Daniel Rock—pairing ATLAS adoption data with heavier academic firepower on work, growth, and diffusion.

DeepMind Institute opens with Legg, Manyika, and Hassabis as directors—four essays on AGI economics, readable reasoning, flourishing, and a U.S.-led frontier standards body that could ratchet toward coordinated slowdowns.

Google Labs’ CC becomes a shared family agent for up to six adults—own Google account, selective email/Drive sharing, morning Day Ahead briefs, PDF chores—on Gemini 3.8 Flash, waitlisted and not for kids’ accounts.

UN System Data Commons, built on Google’s open-source stack with MCP support and $2M from Google.org, aims to fix LLMs’ 21.2% average accuracy on UNICEF’s 133,000-query development-indicator test while tracing stats to UN sources.