You know your Google API key has leaked so you rush to disable it before bad actors can start running up charges on your account. Bad news: According to security researchers at Aikido, people can use ...
For more than 20 minutes after deletion, some Google API keys can still be used, apparently creating a major security gap.