Google API Keys Remain Active After Deletion

Aikido Security found that deleted Google API keys can continue authenticating for a median of about 16 minutes and as long as 23 minutes, despite Google Cloud's UI claiming that once a key is deleted it can no longer make API requests. Dark Reading reports: Joe Leon, researcher at Belgian startup Aikido Security, recently analyzed the revocation window - the time between a key's deletion and its last successful authentication - for the cloud giant's API keys. In a blog post publishe...