Research reveals 2,863 public Google API keys can access Gemini endpoints, enabling data exposure and massive billing abuse.

Threat actors are operationalizing AI to scale and sustain malicious activity, accelerating tradecraft and increasing risk for defenders, as illustrated by recent activity from North Korean groups ...

API key exploitation is more than hypothetical. In a different context, a student who reportedly exposed a GCP API key on GitHub last June was left nursing a $55,444 bill (later waived by Google) ...

One of the affected developers shared the incident on Reddit. According to the post, the Google Cloud API key was compromised between February 11 and February ...

A phishing campaign is using a fake Google Account security page to deliver a web-based app capable of stealing one-time ...

Aave labs spends $1.5M on a year-long audit ahead of V4 launch, with 900+ researchers reviewing the code to strengthen DeFi security.

A new report out today from Zenity Labs, the research arm of agentic security company Zenity Ltd., details a family of ...