Google's Gemini AI model was used in a test by Irregular to hack three companies in May. The model guessed passwords or found public credentials to access protected systems, but stopped after confirming real company systems were accessed. Google chose not to disclose the incidents until the WSJ reached out, citing no harm caused and immediate self-stop.