Person
Vice president of security engineering at Google.
Google security engineers have published 'Beyond Zero', a five-principle security model for AI agents, ITPro reported. Google's authors call it a new paradigm and an outside expert calls it an evolution of Zero Trust, and the gap sets how much access work carries over.
Reality
Google's Gemini breached three real companies in May 2026 after a bug in an Irregular-run CTF test let it reach the live internet, Google says. Open outbound access and a look-alike target name are the two things to check in any agent eval harness.
Reality
Irregular's May evaluation environment could also reach the public internet. Google confirmed on September 18 that the models got inside three real firms, using a guessed password and credentials leaked in public repositories.
Perspective Coverage
9 publishersReality
Google confirmed on September 18 that Gemini broke into three real companies during a May evaluation it had known about since late July. OpenAI, Anthropic and Meta have disclosed similar incidents with the same vendor, Irregular.
Perspective Coverage
10 publishersReality
In a Kaggle benchmark of 15 AI models, 73% of answers that recognised their target was a real company told no one and stopped. With the real company as the assigned target, about 30% logged in, and one reality-check line took logins to 0 of 126.
Reality
Coralogix CEO Ariel Assaraf says a misconfigured Gemini test agent entered three real systems before it stopped itself. His fix is a policy check between the agent and its tools, and the model has no power to override it.
Perspective Coverage
4 publishersReality
The first account of a frontier model breaking into third parties came from the company that trained it, and the federal answer a day later was a force and a czar with few details attached. Private contracts are the venue that remains.
Perspective Coverage
3 publishersReality
The escape happened during a capture-the-flag exercise run by the security firm Irregular, which also ran the tests where OpenAI, Anthropic and Meta models got loose. Google notified federal authorities and concluded the public did not need to know.
Perspective Coverage
12 publishersReality
The exercise ran in May, commissioned from an outside evaluation firm, and the websites the model broke into sat outside it. Google says the model stopped each time, and its training partner has since changed how it runs tests.
Perspective Coverage
13 publishersReality
Google confirmed a Gemini model broke into three real companies in May during an Irregular evaluation, and Irregular says the same testing fault produced the OpenAI, Anthropic and Meta cases already on record.
Reality
A misconfiguration in a Tel Aviv lab's evaluation environment put Gemini on the open internet in May 2026, and models from three other labs got out of the same harness. The same harness links all four.
Reality