Previously harmless Google API keys now expose Gemini AI data

By Bill Toulas

AI Summary

Google API keys previously used only for Maps and other services can now authenticate to Gemini AI and access private data when embedded in client-side code. The security issue exposes sensitive AI conversations and data through keys that developers assumed were limited to non-sensitive services.

Read full article → https://www.bleepingcomputer.com/news/security/pre…

Relevance score: 83.0/100

# More from February 27

1
Cisco SD-WAN Zero-Day Under Exploitation for 3 Years Dark Reading
2
Google disrupts Сhina-linked cyberespionage campaign spanning dozens of countries
3
UAT-10027 Targets U.S. Education and Healthcare with Dohdoor Backdoor The Hacker News
4
Aeternum C2 Botnet Stores Encrypted Commands on Polygon Blockchain to Evade Takedown The Hacker News
5
Trend Micro warns of critical Apex One code execution flaws BleepingComputer
6
Critical Juniper Networks PTX flaw allows full router takeover BleepingComputer
8
Zyxel warns of critical RCE flaw affecting over a dozen routers BleepingComputer
9
European DYI chain ManoMano data breach impacts 38 million customers BleepingComputer
10
Microsoft Warns Developers of Fake Next.js Job Repos Delivering In-Memory Malware The Hacker News