Research reveals 2,863 public Google API keys can access Gemini endpoints, enabling data exposure and massive billing abuse.
API key exploitation is more than hypothetical. In a different context, a student who reportedly exposed a GCP API key on GitHub last June was left nursing a $55,444 bill (later waived by Google) ...
IntroductionIn December 2025, Zscaler ThreatLabz discovered a campaign linked to APT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima), which is a DPRK-backed threat group. In this campaign ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results