AI coding tool OpenCode breached, unauthorized charges made with stored OpenAI, Anthropic, and Google API keys—3 things to decide before entrusting your keys

Hello. This is the department that tries to build everything with AI.Table of ContentsThis news covers accidents, risks, and ...
Infosecurity-magazine.com

Google API Keys Quietly Gain Access to Gemini on Android Devices

A flaw in Google's API key system has reportedly exposed mobile applications to unintended access to its Gemini AI platform. According to a CloudSEK advisory published on April 8, the issue affects ...
Dark Reading

Cybercrooks Scrape OpenAI API Keys to Pirate GPT-4

Yesterday, moderators of the r/ChatGPT Discord channel banned a script kiddie who was freely sharing stolen OpenAI API keys with hundreds of other users. API keys allow developers to integrate ...

Key Rotation and Detection: Technology and Security Explained for Middle and High School Students #15

After creating a new key, make sure the old key can no longer be used. If a key is leaked, prioritize stopping misuse over the scheduled replacement. Automatic checks are reassuring, but there are ...
MediaNama

Railway urges users to revoke API keys after cyberattack exposes customer secrets

Railway urges users to rotate API keys and credentials after a cyberattack potentially exposed sensitive customer data.
Help Net Security

Microsoft shortens NuGet API key lifetime to improve supply chain security

Microsoft is reducing the lifetime of new NuGet.org API keys from 365 days to 30 days starting August 17, 2026, to improve the security of NuGet, its package repository for .NET developers. API keys ...