Google disclosed that state-backed hackers from China, Iran, North Korea, and Russia are using Gemini AI across all attack stages—reconnaissance to post-compromise actions. Google also blocked 100,000+ prompts attempting to reverse-engineer Gemini through "model extraction" attacks. Attackers systematically query the system to replicate decision-making and train competing models. The AI tools meant to help are now being weaponized at scale.