In brief – GitBook disclosed a targeted cyberattack involving AI agents that gave an attacker unauthorized access to some of its infrastructure credentials on November 2. – Potentially exposed information includes API tokens, integration secrets, and questions submitted to…
tBook’s AI assistant. The company says it has found no evidence that hosted content was modified. – GitBook revoked personal API tokens and urged customers to replace connected credentials
Crypto exchange PancakeSwap temporarily took its documentation offline before moving it away from GitBook. GitBook, a documentation platform widely used by cryptocurrency projects, has disclosed a security breach involving AI agents that allowed an attacker to gain access to some of its infrastructure credentials, forcing the company to shut down services and revoke customer access tokens. In a security disclosure published today, the company described the incident as “a sophisticated, highly targeted attack using AI agents.” The attacker gained unauthorized access at 7 p.m.
Central European Time on November 2, according to GitBook, which said it detected the intrusion immediately and moved to contain it. The reference to AI agents is significant. Unlike traditional chatbots that simply respond to questions, AI agents can carry out sequences of actions, interact with software, and perform tasks with limited human supervision, making them potentially useful to attackers trying to automate parts of a cyberattack.