Google API keys remain active for up to 23 minutes after
May 21, 2026
1 min read
6 views
cybersecurity
news
Security researchers at Aikido discovered that Google API keys remain functional for up to 23 minutes after deletion due to slow propagation, allowing attackers to continue accessing services and running up costs.
Was this article helpful?
0 found this helpful