Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-02-26 · source-backed
Must-read security research: when Google enabled Gemini API, millions of existing public API keys retroactively gained sensitive privileges. 2,863 live vulnerable keys found via Common Crawl scanning, including keys belonging to Google itself and major financial institutions. New vulnerability class: API surface expansion creates retroactive secrets. Root-cause fix still in progress.
Each link below shares sources, entities, or timing with this story.
Today's big security find from Willison: Truffle Security discovered 2,863 exposed Google API keys that silently gained Gemini access when Google enabled the Gemini API. Keys intentionally made public for Maps became secret credentials with no notification. Google classified i...
"Gemini is Cooked but GCP is Cooking" argues Google quietly shelved 3.5 Pro, which industry chatter placed at roughly Opus 4.5 level, shipping Gemini 3.6 Flash as a bridge the authors call worse than Muse Spark 1.2, Grok 4.5, and tier-1 Chinese open-source models. The hard num...
Google launched agentic video understanding across Gemini 3.7 Flash, 3.6 Flash and 3.5 Flash-Lite (Google). Instead of scanning a video start to finish at a fixed sample rate, the model runs an internal loop deciding what to watch, at what speed, and through which channel: fra...
Nano Banana 2 Lite (Gemini 3.1 Flash-Lite Image) generates images in as little as four seconds and is live in AI Studio, the Gemini API, AI Mode, and the Gemini app. Gemini Omni Flash entered public preview for video generation and conversational editing at $0.10 per second, m...
A June 18 model-tracking roundup reports Google set Gemini 2.5 Flash as the default across its consumer Gemini products, prioritizing latency and cost. This is single-source as of writing, so flag it pending the official Gemini blog, but it lines up with Google's other June 18...
Google issued June 16-17 notices retiring multiple model versions with short migration windows. Pin model versions and migrate now. The pattern of fast deprecations is exactly why hard version pinning is baseline practice for any API or agent builder. (Google / BuildFastWithAI)
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.