Researchers with Truffle Security are warning that old and seemingly benign Google API keys might now be weaponized by threat actors after gaining Gemini AI authorization permissions, in a destructive ...

Crypto.com launches OpenClaw API integration, enabling AI-powered trading agents with custom budgets, permissions, and trade approvals.

One of the affected developers shared the incident on Reddit. According to the post, the Google Cloud API key was compromised between February 11 and February ...

Research reveals 2,863 public Google API keys can access Gemini endpoints, enabling data exposure and massive billing abuse.

API key exploitation is more than hypothetical. In a different context, a student who reportedly exposed a GCP API key on GitHub last June was left nursing a $55,444 bill (later waived by Google) ...

Over 2,800 exposed Google API keys may allow unauthorized Gemini AI access, risking data leaks and massive API charges.

Google API keys for services like Maps embedded in accessible client-side code could be used to authenticate to the Gemini AI ...

On Jan. 21, YouTube CEO Neal Mohan released a lengthy blog post about what creators can expect in 2026, outlining upcoming changes poised to drastically affect creator experiences on the platform. The ...

A self-styled social networking platform built for AI agents contained a misconfigured database which allowed full read and write access to all data, security researchers have revealed. Moltbook was ...

A Chrome extension posing as an AI assistant exposed more than 10,000 users, secretly harvesting OpenAI API keys and sending data to attacker-controlled servers. Researchers say at least 459 API keys ...

Flow Traders has integrated a new exchange API key management system into its crypto trading infrastructure, responding to growing concern over operational risks tied to automated trading. The ...

Cybersecurity researchers have raised red flags about a new artificial intelligence personal assistant called Clawdbot, warning it could inadvertently expose personal data and API keys to the public.