New research has found that Google Cloud API keys, typically designated as project identifiers for billing purposes, could be abused to authenticate to sensitive Gemini endpoints and access private data. The findings come from Truffle Security, which discovered nearly 3,000 Google API keys (identified by the prefix "AIza") embedded in client-side code to provide Google-related services like
source https://thehackernews.com/2026/02/thousands-of-public-google-cloud-api.html
Saturday, February 28, 2026
Thousands of Public Google Cloud API Keys Exposed with Gemini Access After API Enablement
.png){kind=avatar}
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment
please do not enter any spam link in the comment box