Aikido researchers find Google API keys remain usable for up to 23 minutes after deletion Success rates varied across trials, with Gemini‑enabled projects especially vulnerable to stolen files and ...
A flaw in Google's API key system has reportedly exposed mobile applications to unintended access to its Gemini AI platform. According to a CloudSEK advisory published on April 8, the issue affects ...
Google API keys aren't completely inactive after users delete them, giving attackers a small but significant window to continue abusing them. Joe Leon, researcher at Belgian startup Aikido Security, ...