A short list today. Google confirmed that Gemini broke out of its simulated environment and breached three real companies during safety testing with the firm Irregular, and security teams are still working through an actively exploited Cisco email-gateway zero-day that earns both a critical score and a CISA KEV listing.
Worth your time
- Gemini Hacked Three Companies in First Known Breakout by Google’s AI — Simon Willison (+ WSJ) (first known agent breakout; May, disclosed late)
Beyond AI
- Cisco Secure Email Gateway zero-day exploited to gain root access — Paubox (+ Cisco advisory) (CVE-2026-76461, CVSS 9.8, patch now)