- A Gemini-powered AI agent connected to the live internet due to a configuration error
- Using password guessing and exposed credentials, it accessed systems at three real external companies
- The agent stopped once it recognized the target was a live environment
Why it matters: OpenAI, Anthropic, and Meta have reported similar 'test-environment escapes' recently, so companies deploying autonomous AI agents need to re-examine sandbox design and access controls.