Google API keys weren't secrets, but then Gemini changed the rules
Google API keys, previously considered non-sensitive, can now be used by Gemini to access private user data. A scan of millions of websites revealed nearly 3,000 Google API keys that were originally deployed for public services.
trufflesecurity.com
18 min
2/25/2026
Google API keys weren't secrets, but then Gemini changed the rules
Google API keys, previously considered non-sensitive, can now be used by Gemini to access private user data. A scan of millions of websites revealed nearly 3,000 Google API keys that were originally deployed for public services.
trufflesecurity.com
18 min
2/25/2026
Google API keys weren't secrets, but then Gemini changed the rules
Google API keys, previously considered non-sensitive, can now be used by Gemini to access private user data. A scan of millions of websites revealed nearly 3,000 Google API keys that were originally deployed for public services.
trufflesecurity.com
18 min
2/25/2026
No more articles to load