GitBook Targeted by AI Agent Attack, Some Infrastructure Credentials May Be Compromised

Odaily: Document platform GitBook disclosed that on November 2 it suffered a targeted cyberattack carried out using AI agents, in which attackers gained unauthorized access to some of its infrastructure credentials. GitBook said it immediately detected and contained the intrusion, and that there is no evidence that hosted content was modified.

Potentially affected information includes integration tokens, Git Sync keys, API tokens, and questions users submitted to the GitBook AI assistant. GitBook has revoked customer API tokens and is requiring users to rotate credentials related to GitBook and third-party services; users of its MCP server need to re-authenticate.

Decentralized exchange PancakeSwap had proactively taken its documentation offline and stated that its own systems and applications were unaffected. The exchange subsequently migrated its documentation to its own infrastructure and restored access, with existing documentation links still usable. (Decrypt)