Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-02-26 · source-backed
Today's big security find from Willison: Truffle Security discovered 2,863 exposed Google API keys that silently gained Gemini access when Google enabled the Gemini API. Keys intentionally made public for Maps became secret credentials with no notification. Google classified it as Tier 1 privilege escalation. Root-cause fix still in progress. This is a new vulnerability class: API surface expansion creates retroactive secrets out of previously-public credentials. Audit any GCP project using client-side API keys immediately.
Each link below shares sources, entities, or timing with this story.
Gemini built by Google / Shared entities / Same source / Shared topic / What happened next
Linked by a graph relationship (Gemini built by Google); both cover Gemini, Maps, Truffle Security; cite the same source (Truffle Security discovered).
Google released Gemini API / Shared entities / Shared topic
Linked by a graph relationship (Google released Gemini API); both cover Gemini API, Google, Root, Truffle Security; overlapping topics (class, creat, enabled, escalation, gemini).
Gemini built by Google / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Gemini built by Google); both cover GCP, Gemini, Gemini API, Google; overlapping topics (gemini, google).
Gemini built by Google / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Gemini built by Google); both cover Audit, Gemini, Google; overlapping topics (access, audit, gemini).
Google released Google Search / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Google released Google Search); both cover Gemini, Google, Willison; overlapping topics (gemini, google).
Google released AI Mode / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Google released AI Mode); both cover Gemini, Gemini API, Google; overlapping topics (gemini, google).
Google released Search / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Google released Search); both cover Gemini, Google, Maps; overlapping topics (gemini, google).
Antigravity built by Google / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Antigravity built by Google); both cover Gemini, Gemini API, Google; overlapping topics (became, gemini).