Gemini 在安全测试中入侵三家真实公司
Google 的 Gemini 在 Irregular 的测试中因虚构公司撞名且联网未关，用猜测和泄露凭证访问了真实公司系统，作者猜测涉事模型可能是 Gemini 4 Pro。
Google’s Gemini just hacked three real companies during a cybersecurity test. Apparently the new benchmark for whether an AI model is actually good is whether it can hack companies. The task was to hack a fictional company, but the fictional company shared a name with a real one and internet access was accidentally left enabled. Gemini searched the name, found the real company, then gained access using guessed and exposed credentials before realizing what had happened and stopping itself. The testing firm was Irregular, the same company behind security tests involving models from Anthropic, OpenAI and Meta. Google says this wasn’t “misalignment” because Gemini stopped once it realized it had accessed real systems. I'll love to know what model did this though Maybe Gemini 4 Pro? 👀 Who's next on the table... maybe Moonshot's Kimi?