API key leak at OpenCode. I checked my Mac and found two active AI keys in the same .env file

The OpenCode team emailed users to inform them that their stored API keys may have been leaked. The story reached 879 points on HN, and reports have appeared on r/ClaudeAI about users having $158 ...
Dark Reading

Cybercrooks Scrape OpenAI API Keys to Pirate GPT-4

Yesterday, moderators of the r/ChatGPT Discord channel banned a script kiddie who was freely sharing stolen OpenAI API keys with hundreds of other users. API keys allow developers to integrate ...

Active API keys exposed in survey of 10 million sites. The pitfalls of key management affecting banks and infrastructure

Table of Contents API keys are credentials for using external services 10 million is the survey scale, not the number of ...
techtarget

API keys: Weaknesses and security best practices

With the popularity of APIs comes the question of their security. If APIs leak data or can be an entry point for an attack, what good is the security strategy of the applications they connect to?
BleepingComputer

Previously harmless Google API keys now expose Gemini AI data

Google API keys for services like Maps embedded in accessible client-side code could be used to authenticate to the Gemini AI assistant and access private data. Researchers found nearly 3,000 such ...