Previously harmless Google API keys now expose Gemini AI data

Google API keys for services like Maps embedded in accessible client-side code could be used to authenticate to the Gemini AI ...
Cybernews

Hackers can exploit thousands of exposed Google API keys to access Gemini and steal data

Exposed Google API keys previously not considered secrets can now inadvertently grant attackers access to sensitive Gemini ...

Sexpionage and how foreign spies use intimacy to steal secrets | The Excerpt

As honey traps target even trained officials, questions grow about safeguarding national security from seduction‑based espionage.
The Hacker News

Claude Code Flaws Allow Remote Code Execution and API Key Exfiltration

Claude Code flaws allow remote code execution and API key theft via untrusted repositories; three bugs fixed across 2025–2026 ...
Microsoft

Developer-targeting campaign using malicious Next.js repositories

A developer-targeting campaign leveraged malicious Next.js repositories to trigger a covert RCE-to-C2 chain through standard ...
Security Boulevard

Authenticate Users with WS-Federation in Web Applications

Master WS-Federation for hybrid identity. Learn how to bridge legacy ASP.NET apps with modern Entra ID and OIDC using the .NET 10 Passive Requestor Profile.
The Hacker News

Malicious npm Packages Harvest Crypto Keys, CI Secrets, and API Tokens

The module targets Claude Code, Claude Desktop, Cursor, Microsoft Visual Studio Code (VS Code) Continue, and Windsurf. It also harvests API keys for nine large language models (LLM) providers: ...
InfoWorld

JetBrains introduces Java to Kotlin converter for Visual Studio Code

Extension that converts individual Java files to Kotlin code aims to ease the transition to Kotlin for Java developers.