Exposed Google Cloud API keys in public JavaScript may now authenticate Gemini API calls, risking data exposure and runaway ...

セキュリティ企業Truffle Securityが米国時間2026年2月25日付の記事で、Googleが長年「APIキーは秘密情報ではない」と案内してきたキーが、AI「Gemini」のAPIにも通ってしまう場合がある問題を公開しました。

Research reveals 2,863 public Google API keys can access Gemini endpoints, enabling data exposure and massive billing abuse.

Exposed Google API keys previously not considered secrets can now inadvertently grant attackers access to sensitive Gemini ...

Google API keys for services like Maps embedded in accessible client-side code could be used to authenticate to the Gemini AI ...

Version 2.7 of the runtime for JavaScript and TypeScript stabilizes the Temporal API, introduces npm overrides, and ...

Thousands of Google Cloud API keys available online may have given unauthorised access to sensitive Gemini AI endpoints, ...

Abstraction is considered a virtue in software development. However, practice shows that wrong abstractions cause more harm ...

Chrome’s Gemini panel requires camera and microphone access to function as an AI assistant. That same elevated access, researchers found, could be claimed by any rogue extension, including one with ...

For decades, web architecture has followed a familiar and frankly exhausting pattern. A dominant approach emerges, gains near ...

Over 2,800 exposed Google API keys may allow unauthorized Gemini AI access, risking data leaks and massive API charges.

［株式会社オーシャンブリッジ］AIエージェントのWeb実装とメンテナンスの負荷を劇的に軽減株式会社オーシャンブリッジ（本社: 東京都港区、代表取締役社長:澤紀和、以下オーシャンブリッジ）は、オランダに本拠地を置くソフトウェア開発企業 Surfly B ...