Google API Keys Remain Active After Deletion

Summary

A security researcher found that Google API keys remain active for 23 minutes after deletion, despite Google's claim of immediate deletion. This delay could allow malicious actors to continue using the keys even after they are supposedly revoked, potentially leading to unauthorized access and data breaches.

Entities