In r/cybersecurity and r/sysadmin, builders respond to Google enabling Gemini on existing GCP API keys by creating audits to detect which projects and keys now have generativelanguage enabled, treating it as an unexpected expansion of attack surface.
After the recent incident where Google silently enabled Gemini on existing API keys, I built keyguard.
keyguard audit connects to your GCP projects via the Cloud Resource Manager, Service Usage, and API Keys APIs
checks whether generativelanguage.googleapis.com is enabled on
keyguard audit connects to your GCP projects via the Cloud Resource Manager, Service Usage, and API Keys APIs, checks whether generativelanguage.googleapis.com is enabled on
Built a tool to find which of your GCP API keys now have Gemini access
connects to your GCP projects via the Cloud Resource Manager, Service Usage, and API Keys APIs
This finding is one of many signals tracked across Cyber Security. The live feed updates every few hours with new authority voices, debates, and emerging ideas.
← Back to Cyber Security