A flaw in Google's API key system has reportedly exposed mobile applications to unintended access to its Gemini AI platform.

Google Cloud API keys, normally used as simple billing identifiers for APIs such as Maps or YouTube, could be scraped from websites to give access to private Gemini AI project data, researchers from ...

Google has stated that API keys for services like Firebase and Google Maps are 'safe to share,' but Truffle Security has discovered that the same keys can be used to access Gemini, the administrator's ...

For end users, this means any data shared with Gemini, such as documents, images, or audio, and stored in the Files API, can ...

Google is working to fix a problem with its API keys after security researchers pointed out possible misuse. This is because the keys for accessing Google's cloud services, such as Maps or Firebase, ...

Google’s Gemini integration in Android apps may expose sensitive user data and enable misuse of API keys, according to a ...

A CloudSEK report reveals that 22 Android apps with over 500 million installs expose hardcoded API keys that can access ...