Google’s Gemini AI model accessed three websites during a May cybersecurity test, including by guessing passwords and finding public credentials.