A flaw in Google's API key system has reportedly exposed mobile applications to unintended access to its Gemini AI platform.

Threat actors can extract Google API keys embedded in Android applications to gain access to Gemini AI endpoints and ...

Google Cloud API keys, normally used as simple billing identifiers for APIs such as Maps or YouTube, could be scraped from websites to give access to private Gemini AI project data, researchers from ...

Google’s Gemini integration in Android apps exposes sensitive API keys in popular apps, potentially risking user data and ...