#api-security
#api-security
[ follow ]
Information security
fromTheregister
1 week agoDev stunned by $82K Gemini API key bill after theft
A developer's stolen Google Gemini API key resulted in $82,314 in unauthorized charges within 48 hours, while Google refused to waive costs citing shared responsibility, threatening the startup's survival.
fromThe Hacker News
1 week agoThousands of Public Google Cloud API Keys Exposed with Gemini Access After API Enablement
With a valid key, an attacker can access uploaded files, cached data, and charge LLM-usage to your account. The keys now also authenticate to Gemini even though they were never intended for it. The problem occurs when users enable the Gemini API on a Google Cloud project, causing existing API keys to gain surreptitious access to Gemini endpoints without any warning or notice.
Information security
fromInfoWorld
1 week ago'Silent' Google API key change exposed Gemini AI data
For more than a decade, Google's developer documentation has described these keys, identified by the prefix 'Aiza', as a mechanism used to identify a project for billing purposes. Developers generated a key and then pasted it into their client-side HTML code in full public view.
Miscellaneous
[ Load more ]