PulseAugur
EN
LIVE 00:48:05

Google API keys remain active for 23 minutes after deletion

By PulseAugur Editorial · [3 sources] ·

Security researchers have discovered a vulnerability in Google's API key management system. Deleted API keys can remain active for up to 23 minutes, potentially allowing unauthorized access. This loophole was identified by Aikido Security, who found that the keys continue to authenticate despite the Google Cloud UI indicating they have been removed. AI

IMPACT This vulnerability could expose sensitive data and systems to unauthorized access if not properly managed.

RANK_REASON Security researchers identified a vulnerability in a widely used cloud platform's API key management. [lever_c_demoted from research: ic=2 ai=0.4]

Read on The Register — AI →

AI-generated summary · Google Gemini · from 3 sources. How we write summaries →

Google API keys remain active for 23 minutes after deletion

How we ranked this

Signal score
0 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
Security researchers identified a vulnerability in a widely used cloud platform's API key management. [lever_c_demoted from research: ic=2 ai=0.4]
Source corroboration
3 independent sources
Multiple independent publishers reporting the same story raises confidence that it's real and newsworthy.
Topics
safety, product
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
Standard
On-topic for AI-industry coverage; kept in the public index.
Story freshness
128 days old
Aged out of breaking-news scoring windows; ranking reflects the durable signal from the full source set.
Coverage growth since scoring
+1 source(s) since last score
New sources have picked up this story since our last re-score. Score will update on the next scoring pass.

Full methodology in our editorial standards.

COVERAGE [3]

  1. Mastodon — sigmoid.social TIER_1 English(EN) · [email protected] ·

    📰 Google API Keys Remain Active After Deletion Aikido Security found that deleted Google API keys can continue authenticating for a median of about 16 minutes a

    📰 Google API Keys Remain Active After Deletion Aikido Security found that deleted Google API keys can continue authenticating for a median of about 16 minutes and as long as 23 minutes, despite Google Cloud's UI claiming that once a key is dele... 📰 Source: Slashdot 🔗 Link: https…

    LINKS tech.slashdot.org/…/google-api-keys-remai…
  2. The Register — AI TIER_1 English(EN) ·

    Threat hunters find Google API keys still usable 23 minutes after deletion

    Plenty of time for bad actors to grab data or hit you with a giant bill

  3. Mastodon — fosstodon.org TIER_1 English(EN) · [email protected] ·

    A new study shows deleted Google Cloud API keys remain active for up to 23 minutes. Google closed the bug report as a "won't fix" system property. # Tech # Cybe

    A new study shows deleted Google Cloud API keys remain active for up to 23 minutes. Google closed the bug report as a "won't fix" system property. # Tech # CyberSecurity # GoogleCloud # AI # Development https:// blazetrends.com/google-api-key s-stay-active-23-minutes-after-deleti…

RELATED ENTITIES

RELATED TOPICS