Sicurezza cloud · Configurazione errata
API key Google pubbliche consentono accesso a Gemini, abuso fatturazione Quando la Generative Language API (Gemini) è abilitata su un progetto, quelle key possono autenticare a Gemini e permettere accesso a /files, /cachedContents e richieste LLM a carico dell'account.
3 fonti · 28 feb
Cronologia Fonti 28 feb The Hacker News
Thousands of Public Google Cloud API Keys Exposed with Gemini Access After API Enablement
Research reveals 2,863 public Google API keys can access Gemini endpoints, enabling data exposure and massive billing abuse.
originale 27 feb CSO Online
‘Silent’ Google API key change exposed Gemini AI data
Billing ID keys were turned into Gemini authentication credentials without informing developers.
originale 26 feb BleepingComputer
Previously harmless Google API keys now expose Gemini AI data
Google API keys for services like Maps embedded in accessible client-side code could be used to authenticate to the Gemini AI assistant and access private data.
originale Part of the PlainSec briefing for 2026-03-01
Every edition of this story: API key Google pubbliche consentono accesso a Gemini, abuso fatturazione
Sicurezza cloud · Configurazione errata
API key Google pubbliche consentono accesso a Gemini, abuso fatturazione Quando la Generative Language API (Gemini) è abilitata su un progetto, quelle key possono autenticare a Gemini e permettere accesso a /files, /cachedContents e richieste LLM a carico dell'account.
3 fonti · 28 feb
Cronologia Fonti 28 feb The Hacker News
Thousands of Public Google Cloud API Keys Exposed with Gemini Access After API Enablement
Research reveals 2,863 public Google API keys can access Gemini endpoints, enabling data exposure and massive billing abuse.
originale 27 feb CSO Online
‘Silent’ Google API key change exposed Gemini AI data
Billing ID keys were turned into Gemini authentication credentials without informing developers.
originale 26 feb BleepingComputer
Previously harmless Google API keys now expose Gemini AI data
Google API keys for services like Maps embedded in accessible client-side code could be used to authenticate to the Gemini AI assistant and access private data.
originale Part of the PlainSec briefing for 2026-03-01
Every edition of this story: API key Google pubbliche consentono accesso a Gemini, abuso fatturazione