The Register
1 month, 3 weeks ago
Threat hunters find Google API keys still usable 23 minutes after deletion
Plenty of time for cyber crims to grab data or hit you with a giant bill
Security news aggregator
Latest cybersecurity reporting from selected sources.
Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.
8
headlines in this view
Refine the feed
Search across headline titles and summaries.
Volume over time
Weekly headline count for the current query.
Showing 8 most recent headlines
Filtered view
The Register
3 months ago
Agents hooked into GitHub can steal creds – but Anthropic, Google, and Microsoft haven't warned users
Researchers who found the flaws scored beer money bounties and warn the problem is probably pervasive Exclusive Security researchers hijacked three popular AI agents that integrate with GitHub Actions by using a new type of prompt injection attack to steal API keys and access tokens, and the vendors who run agents didn’t disclose the problem.…
The Register
4 months, 2 weeks ago
Dev stunned by $82K Gemini bill after unknown API key thief goes to town
Probably not an isolated incident only as researchers have already found 2,863 live API keys exposed A developer says their company is on the hook for more than $82,000 in unauthorized charges after a stolen Google Gemini API key racked massive usage costs up in just 48 hours.…
The Register
2 years, 2 months ago
Google, Meta, Spotify break Apple's device fingerprinting rules – new claim
And the iOS titan doesn't seem that bothered with this data leaking out Last week, Apple began requiring iOS developers justify the use of a specific set of APIs that could be used for device fingerprinting. Yet the iGiant doesn't appear to be making much effort to ensure that Google, Meta, and Spotify comply with the rules, it's claimed.…
The Register
2 years, 4 months ago
Researchers jimmy OpenAI's and Google's closed models
Infosec folk aren’t thrilled that if you poke APIs enough, you learn AI's secrets Boffins have managed to pry open closed AI services from OpenAI and Google with an attack that recovers an otherwise hidden portion of transformer models.…
The Register
2 years, 7 months ago
Exposed Hugging Face API tokens offered full access to Meta's Llama 2
With more than 1,500 tokens exposed, research highlights importance of securing supply chains in AI and ML The API tokens of tech giants Meta, Microsoft, Google, VMware, and more have been found exposed on Hugging Face, opening them up to potential supply chain attacks. …
The Register
4 years ago
Google battles bots, puts Workspace admins on alert
No security alert fatigue here Google has added API security tools and Workspace (formerly G-Suite) admin alerts about potentially risky configuration changes such as super admin passwords resets.…
The Register
4 years, 2 months ago
Google starts testing fenced frames to guard its Privacy Sandbox
Oh, serve me ads, lots of ads, under clouded eyes above, just fence me in Google in the next few days plans to begin testing fenced frames, a proposed web API to help its Privacy Sandbox ad technologies meet commitments to privacy of a sort.…