Exposed Google API Keys Allow Gemini Access, Billing Abuse

Truffle Security found 2,863 public Google Cloud API keys embedded in client-side code that gain access to Gemini after the Generative Language API is enabled.

Part of the PlainSec briefing for 2026-03-01

Sources

• BleepingComputer
• CSO Online
• The Hacker News