Analyst207Apr 9

Google API Flaw Exposes Android Apps to Gemini AI Vulnerabilities

A recently discovered flaw in Google's API keys is leaving millions of Android apps vulnerable to Gemini AI exploits, potentially exposing private files and racking up unexpected billing charges. This security gap allows mobile apps to quietly tap into the powerful AI, all without users noticing.

https://osintsights.com/google-api-flaw-exposes-android-apps-to-gemini-ai-vulnerabilities?utm_source=mastodon&utm_medium=social

#GoogleApi #Android #GeminiAi #Vulnerabilities #MobileSecurity

Google API Flaw Exposes Android Apps to Gemini AI Vulnerabilities

Discover how Google API flaws expose Android apps to Gemini AI vulnerabilities, putting private files at risk. Learn more and protect your device now effectively.

OSINTSights
PPC LandMar 27
FYI: DV360 API gets Discord channels and a documentation overhaul: Google today added Display & Video 360 API support to its Discord server and revamped the API and SDF documentation with new Task and Concept guides and updated navigation. https://ppc.land/dv360-api-gets-discord-channels-and-a-documentation-overhaul/ #DV360 #GoogleAPI #Discord #DigitalMarketing #AdTech
DV360 API gets Discord channels and a documentation overhaul

Google today added Display & Video 360 API support to its Discord server and revamped the API and SDF documentation with new Task and Concept guides and updated navigation.

PPC Land
PPC LandMar 24
DV360 API gets Discord channels and a documentation overhaul: Google today added Display & Video 360 API support to its Discord server and revamped the API and SDF documentation with new Task and Concept guides and updated navigation. https://ppc.land/dv360-api-gets-discord-channels-and-a-documentation-overhaul/ #DV360 #GoogleAPI #Discord #DigitalMarketing #AdTech
DV360 API gets Discord channels and a documentation overhaul

Google today added Display & Video 360 API support to its Discord server and revamped the API and SDF documentation with new Task and Concept guides and updated navigation.

PPC Land
PPC LandMar 4
FYI: Google API keys hiding in plain sight now unlock Gemini AI: Google API keys embedded in public code now expose Gemini AI access and billing risk after researchers found 2,800 live keys in a November 2025 crawl. Here's what changed and why it matters. https://ppc.land/google-api-keys-hiding-in-plain-sight-now-unlock-gemini-ai/ #GoogleAPI #GeminiAI #Cybersecurity #DataPrivacy #APIKeys
Google API keys weren't secrets - until Gemini changed the rules

TruffleSecurity found 2,863 live Google API keys in public code now granting Gemini AI access. A detailed look at the flaw, the disclosure fight, and what changed.

PPC Land
PPC LandMar 2
ICYMI: Google API keys hiding in plain sight now unlock Gemini AI: Google API keys embedded in public code now expose Gemini AI access and billing risk after researchers found 2,800 live keys in a November 2025 crawl. Here's what changed and why it matters. https://ppc.land/google-api-keys-hiding-in-plain-sight-now-unlock-gemini-ai/ #GoogleAPI #GeminiAI #CyberSecurity #DataBreach #TechNews
Google API keys weren't secrets - until Gemini changed the rules

TruffleSecurity found 2,863 live Google API keys in public code now granting Gemini AI access. A detailed look at the flaw, the disclosure fight, and what changed.

PPC Land
PPC LandMar 1
Google API keys hiding in plain sight now unlock Gemini AI: Google API keys embedded in public code now expose Gemini AI access and billing risk after researchers found 2,800 live keys in a November 2025 crawl. Here's what changed and why it matters. https://ppc.land/google-api-keys-hiding-in-plain-sight-now-unlock-gemini-ai/ #GoogleAPI #GeminiAI #Cybersecurity #DataPrivacy #TechNews
Google API keys weren't secrets - until Gemini changed the rules

TruffleSecurity found 2,863 live Google API keys in public code now granting Gemini AI access. A detailed look at the flaw, the disclosure fight, and what changed.

PPC Land
AllAboutSecurityMar 1

Google API-Schlüssel als ungewollte Gemini-Zugangsdaten

IT-Sicherheitsforscher haben rund 2.800 aktiv nutzbare Google API-Schlüssel im öffentlichen Internet aufgedeckt, die ursprünglich für Kartendienste oder Firebase gedacht waren und nun uneingeschränkten Zugriff auf die Gemini-KI ermöglichen — ohne dass die betroffenen Entwickler je darüber informiert wurden.

https://www.all-about-security.de/google-api-schluessel-als-ungewollte-gemini-zugangsdaten/

#google #googleapi #api #gemini #ki

Google API-Schlüssel als ungewollte Gemini-Zugangsdaten

Öffentliche Google API-Schlüssel gewähren unbemerkt Zugriff auf die Gemini-KI. Forscher identifizierten 2.800 aktive Schlüssel im Netz.

All About Security Das Online-Magazin zu Cybersecurity (Cybersicherheit). Ransomware, Phishing, IT-Sicherheit, Netzwerksicherheit, KI, Threats, DDoS, Identity & Access, Plattformsicherheit
 decioFeb 26

Si vous utilisez une clé API Google Maps/Firebase sur votre site, sachez que ce n’est plus une clé “publique”.

Pendant des années #Google disait que les clés API (AIza…) pouvaient être mises dans le code sans problème.
Mais aujourd’hui ces mêmes clés peuvent aussi donner accès à Gemini.

👉 Une clé visible dans le JavaScript du site peut permettre :

  • d’utiliser du LLM à vos frais 💸

  • d’accéder à certaines données du projet

  • de faire des requêtes API non prévues

En clair : une clé Maps publique peut devenir une clé d’accès à votre projet Cloud.

✔️ À vérifier :

  • Restreindre les clés API (API + domaines/IP)

  • Désactiver Gemini si inutile

  • Régénérer les vieilles clés

[Source originale]
"Google API Keys Weren't Secrets. But then Gemini Changed the Rules."
👇
https://trufflesecurity.com/blog/google-api-keys-werent-secrets-but-then-gemini-changed-the-rules

[Article FR par Korben]
"Clés API Google - 3000 clés publiques donnent accès à Gemini"
👇
https://korben.info/google-api-keys-gemini-secrets.html

💬
⬇️
https://infosec.pub/post/42624972

#CyberVeille #googleapi

Google API Keys Weren't Secrets. But then Gemini Changed the Rules. ◆ Truffle Security Co.

Google spent over a decade telling developers that Google API keys (like those used in Maps, Firebase, etc.) are not secrets. But that's no longer true.

sayzardFeb 24

[개인용 AI 에이전트 구축기: OpenClaw를 활용한 가족 비서 'Stella'와 구글 계정 정지 사건

OpenClaw 프레임워크를 활용해 가족 비서 AI 에이전트 'Stella'를 구축한 사례와 구글 계정 정지 사건에 대한 분석. AI 에이전트의 기술적 한계와 해결 방안을 제시하며, '감독된 에이전트' 인증 계층의 필요성을 강조한다.

https://news.hada.io/topic?id=26952

#aiagent #openclaw #automation #googleapi #smarthome

개인용 AI 에이전트 구축기: OpenClaw를 활용한 가족 비서 'Stella'와 구글 계정 정지 사건

<h4>핵심 요약</h4> <ul> <li> <strong>OpenClaw</strong> 프레임워크를 사용하여 캘린더 관리, 이메일 모니터링, 스마트 홈 제어가 가능한 개인용...

GeekNews
Tom's Hardware ItaliaDec 17

🚀 La nuova API Interactions di Google cambierà il gioco per gli sviluppatori! Innovazione e convenienza come mai prima d'ora. #GoogleAPI #InnovationTech

🔗 https://www.tomshw.it/business/google-lancia-lapi-interactions-per-gli-agenti-ai-2025-12-17

La nuova API Interactions di Google è una svolta per gli sviluppatori

Gestione dello stato lato server, esecuzione in background e supporto MCP per agenti AI autonomi

Tom's Hardware