PANews, citing an GitBook announcement, stated that some of its infrastructure credentials may have been exposed in an AI AI agent attack;GitBook it has revoked personal API tokens, replaced credentials, and restored services, advising users to rotate relevant keys.
Command Code said it had blocked a security incident related to a large-scale distillation attack targeting Anthropic and OpenAI models and had preemptively revoked all of its own API keys. The report also reviewed recent similar key security incidents involving OpenCode, Railway, and Zeabur.
Foundation said its official domain had been used to send spam, stemming from one or more compromised Cloudflare API keys. The relevant keys have been revoked, the malicious domain has been taken down, and Passport devices and the funds in them were not affected.