Vulnerabilities

Google API keys remain active for up to 23 minutes after

May 21, 2026 1 min read 6 views
cybersecurity news
Security researchers at Aikido discovered that Google API keys remain functional for up to 23 minutes after deletion due to slow propagation, allowing attackers to continue accessing services and running up costs.

Was this article helpful?

0 found this helpful

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.