Google Cloud API keys, normally used as simple billing identifiers for APIs such as Maps or YouTube, could be scraped from websites to give access to private Gemini AI project data, researchers from ...

In addition to stealing data, attackers could also use Gemini to impose large API usage fees on their targets. Truffle Security conducted an investigation into a dataset of 2.29 billion pages crawled ...

Google API keys for services like Maps embedded in accessible client-side code could be used to authenticate to the Gemini AI assistant and access private data. Researchers found nearly 3,000 such ...