First screen, captured .
Looks similar
Google API keys weren't secrets, but then Gemini changed the rules(trufflesecurity.com)
1206 points by hiisthisthingon | 288 comments
Truffle Security blog post explaining that public Google API keys, long deemed non-secret, can now access Gemini and private data, based on scans of exposed keys.
Anyone can access deleted and private repository data on GitHub(trufflesecurity.com)
1823 points by __0x1__ | 341 comments
Truffle Security blog post explaining how data from deleted forks, deleted repositories, and private repositories on GitHub can remain accessible to anyone.
I found a backdoor into my bed(trufflesecurity.com)
855 points by riverdroid | 345 comments
Truffle Security blog post describing a backdoor found in the Eight Sleep smart bed that allowed remote access, and how the authors removed it.
Related stories
Google API keys weren't secrets, but then Gemini changed the rules(trufflesecurity.com)
1206 points by hiisthisthingon | 288 comments
Truffle Security blog post explaining that public Google API keys, long deemed non-secret, can now access Gemini and private data, based on scans of exposed keys.
Anyone can access deleted and private repository data on GitHub(trufflesecurity.com)
1823 points by __0x1__ | 341 comments
Truffle Security blog post explaining how data from deleted forks, deleted repositories, and private repositories on GitHub can remain accessible to anyone.
Google Cloud Fraud Defence is just WEI repackaged(privatecaptcha.com)
599 points by ribtoks | 290 comments
A Private Captcha blog post arguing that Google Cloud Fraud Defense, the reCAPTCHA successor announced in May 2026, revives the device attestation of Web Environment Integrity.
Io_uring, kTLS and Rust for zero syscall HTTPS server(blog.habets.se)
444 points by guntars | 138 comments
Blog post describing building an HTTPS web server in Rust using io_uring and kernel TLS to avoid system calls on the request path.
Google is making private AI practical with homomorphic encryption(blog.google)
473 points by u1hcw9nx | 276 comments
Google Security blog post by Jeremy Kun on how Google is using homomorphic encryption to make privacy-preserving AI practical.
Hackers obtain counterfeit TLS certificates for Google and other large services(arstechnica.com)
111 points by colinprince | 37 comments
Ars Technica article reporting that hackers compromised three domain registries and obtained unauthorized TLS certificates for Google and other large services.