Documentation platform GitBook disclosed that attackers used AI agents to launch a targeted attack on November 3 at 2:00 AM Beijing time, obtaining infrastructure credentials. The breach potentially exposed integration tokens, Git Sync keys, API tokens, and visitor queries submitted to GitBook Assistant.
GitBook confirmed no tampering with customer content occurred. The company revoked all personal API tokens, replaced compromised credentials, and restored services by 11:21 PM Beijing time the same day. Users are advised to rotate their GitBook and third-party API keys and re-authenticate the GitBook MCP server. PancakeSwap had temporarily taken its documentation offline during the incident.
GitBook Hit by AI-Powered Attack, Leaks API Keys and Integration Tokens
免責事項: Phemexニュースで提供されるコンテンツは、あくまで情報提供を目的としたものであり、第三者の記事から取得した情報の正確性・完全性・信頼性について保証するものではありません。本コンテンツは金融または投資の助言を目的としたものではなく、投資に関する最終判断はご自身での調査と、信頼できる専門家への相談を踏まえて行ってください。
