Google API Keys Privilege Escalation via Gemini 2863 Live Vulnerable Keys

Truffle Security Blog·high signal

Truffle Security found Google enabling Gemini retroactively granted sensitive privileges to millions of existing public API keys. 2863 live vulnerable keys including Google own and financial institutions.