api security2 articles
Google Billed a Developer $11,000 for a Hack It Detected and Still Won't Explain
Developer Charles Jones was billed $11,089.77 by Google Cloud after his Firebase service account key was compromised, resulting in fraudulent AI image-generation charges he never authorised. Despite Google itself flagging the account for "abusive activity consistent with hijacked resources," its billing team has repeatedly refused to waive the charges, leaving Jones with no clear explanation of how the key was exposed or what security failure he committed. The case highlights a broader problem with Google Cloud, where spending caps remain ineffective or unavailable, and customers facing fraudulent charges must navigate an opaque appeals process with no guarantee of a refund.
Dutch Police Nab Suspect Who Repeatedly Hacked Ajax Amsterdam's IT Systems
Dutch police arrested a 35-year-old man from Buren on suspicion of repeatedly hacking into Ajax Amsterdam's computer systems in early 2026. The attacker exploited vulnerabilities in the club's IT infrastructure to access data on hundreds of individuals, modify stadium bans, and potentially manipulate over 42,000 season tickets and 300,000 fan accounts. Ajax has since patched the vulnerabilities and notified the Dutch Data Protection Authority and police.