Google API Keys Quietly Gain Access to Gemini on Android Devices
2026-04-09T02:52:17Z•ac4164d3779ea4ee0ed84270f112e97a1a7ef63220d36de3f405cea84e440198
LLM-assisted-researchai-securityandroidapt28citrixcnicredential-theftexploitf5fortinetgeminigoogle-api-keysgpu-exploitinfostealeriran-backedninja-formsnpmpatch-nowphishingpypirowhammersupply-chainvulnerabilitieswordpresszero-day
What happened
A wave of high-impact incidents and active exploitation was reported: Citrix NetScaler (CVE-2026-3055) is being exploited in the wild and UK NCSC urged immediate patching for F5 BIG‑IP (CVE-2025-53521). Multiple vendors pushed emergency updates (FortiClient EMS), and WordPress Ninja Forms has an unauthenticated file-upload RCE — update to 3.3.27. Google API key misconfigurations on Android can grant apps access to Gemini (data exposure and billing risk). Threat activity includes APT28 router/DNS hijacking, Iran‑backed intrusions against CNI via internet‑facing OT assets, large-scale phishing/Å
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- infosecurity_magazine
- Record identifier
- ac4164d3779ea4ee0ed84270f112e97a1a7ef63220d36de3f405cea84e440198
- Enrichment time
- 2026-04-09T02:52:17Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.