Previously harmless Google API keys now expose Gemini AI data
2026-03-04T20:04:45Z•4a03a215dce1d751806ea071adb2f884358c198d7a69f79c20df635e6052fe5a
CVE-2026-20127API key exposureChinese espionageCisco SD‑WANGoogle GeminiJuniper PTXJunos OS EvolvedManoManoNext.js malicious repoOlympique MarseilleOpenClaw chatterRCESonicWall lawsuitTrend Micro Apex OneUFP TechnologiesZyxel routersauthentication bypasscredential leakagedata breachdeveloper backdoorransomware trendsremote code executionsupply-chain attackzero-day exploitation
What happened
A roundup of security news: multiple critical remote code execution and takeover flaws were disclosed in widely used products (notably a Juniper PTX Junos OS Evolved router flaw and several critical RCEs in Trend Micro Apex One and Zyxel routers), while Cisco Catalyst SD‑WAN’s critical authentication bypass (CVE-2026-20127) has been actively exploited in zero‑day attacks since 2023. Large-scale breaches and data exposures were reported (ManoMano ~38M customers, UFP Technologies, Olympique Marseille), and previously low-risk Google API keys embedded in client-side code can now be abused to call
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 4a03a215dce1d751806ea071adb2f884358c198d7a69f79c20df635e6052fe5a
- Enrichment time
- 2026-03-04T20:04:45Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.