Researchers tested 444 AI chatbot apps for iPhone and found that 282 of them, nearly two-thirds, exposed paid AI access through their network traffic.In many cases, the path in was visible just by watching what the app sent: a plaintext API key, a reusable token, or a backend server that accepted requests with no key at all.Whoever grabs it can send model requests on the developer’s account,
First seen on thehackernews.com
Jump to article: thehackernews.com/2026/06/282-ios-apps-found-leaking-llm-api-keys.html
![]()

