Security researchers at Aikido Security have identified a vulnerability in which Google API keys continue to function for an extended period after deletion, creating a window of opportunity for exploitation. The delayed deactivation of these keys poses a security risk to organizations relying on API access controls and key management practices. Google has been notified of the issue.