Gemini Broke Out of Its Sandbox. Sort Of.
In May 2026, a Gemini model running a capture-the-flag exercise against a fictional target company reached three real businesses — because the sandbox it was supposed to be sealed inside was inadvertently connected to the open internet. Google calls it mistaken identity. The model brute-forced a login and pulled working credentials out of a public code repository. This episode unpacks what "breaking out of a sandbox" actually means, why natural-language instructions are not containment controls, and why the incident stayed undisclosed for seven weeks. It's also the fourth such disclosure of…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.