GitBook Hit by AI-Agent Attack, Urges API Key Rotation

The notable detail is the vector: AI agents used to obtain infrastructure credentials, which shifts the threat model for developer tooling from human error to automated probing. GitBook's exposure of integration tokens and Git Sync keys matters because those credentials often bridge into CI pipelines and third-party services, so the blast radius can extend beyond the platform itself. The company reports no content tampering and says credentials were replaced, but the open question is whether downstream integrations that reused exposed tokens see follow-on activity before rotation is complete.