Google says Gemini autonomously accessed three private company computer systems in a May security test, guessing passwords and using publicly listed credentials before stopping when it realized the systems were real.