{"id":7166,"date":"2026-11-03T12:00:00","date_gmt":"2026-11-03T12:00:00","guid":{"rendered":"https:\/\/i10xnews.kinsta.cloud\/gitbook-ai-agent-attack-infrastructure-credentials"},"modified":"2026-11-03T12:00:00","modified_gmt":"2026-11-03T12:00:00","slug":"gitbook-ai-agent-attack-infrastructure-credentials","status":"publish","type":"post","link":"https:\/\/i10x.ai\/news\/gitbook-ai-agent-attack-infrastructure-credentials","title":{"rendered":"GitBook: An AI-Agent Attack Reached Infrastructure Credentials and Forced a 16-Hour Outage"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">GitBook has published a blunt post-mortem of a November 2, 2026 breach that its CEO and CTO say was &#8220;driven largely by automation and AI.&#8221; In the <a href=\"https:\/\/www.gitbook.com\/status\/security-incident-2026-11-03\" target=\"_blank\" rel=\"noreferrer noopener\">incident report<\/a>, the company says an attacker used a flaw in GitBook&#8217;s SSO login flow to create sessions &#8220;acting as GitBook staff,&#8221; queried a misconfigured GitHub App, reached internal repositories and a Cloudflare API key, and then used that key to obtain production secrets &#8220;which granted full infrastructure access through a service account.&#8221;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u26a1 Quick Take<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>When:<\/strong> First hijacked account at the targeted customer at 12:27 UTC on November 2; production access at 17:48 UTC; GitBook app taken offline at 20:32 UTC; fully back online at 11:56 UTC on November 3 \u2014 about 16 hours of downtime.<\/li><li><strong>How:<\/strong> SSO login-flow flaw \u2192 staff sessions \u2192 misconfigured GitHub App \u2192 Cloudflare API key \u2192 production secrets and a service account with full infrastructure access.<\/li><li><strong>Access window:<\/strong> About 2 hours 45 minutes on the evening of November 2, and about 40 minutes early on November 3.<\/li><li><strong>Customer data treated as exposed:<\/strong> API tokens, integration tokens and secrets, session signing secrets, questions asked to GitBook Assistant, authenticated doc sites, and the ability to act as the GitBook GitHub\/GitLab apps in connected repos. Billing data, passwords and IP addresses were not compromised, GitBook says.<\/li><li><strong>Intent:<\/strong> &#8220;Everything we&#8217;ve seen points to an attack aimed at one GitBook customer rather than at GitBook as a whole.&#8221; GitBook found no evidence that any other customer&#8217;s content was modified, but still treated all customer data as exposed.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">What happened<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The chain is a classic identity failure, executed quickly. A bug in the SSO login flow let the attacker mint staff sessions. A GitHub App that had been installed with a weak configuration then gave up authentication material for GitBook&#8217;s own repos. From there the attacker obtained a Cloudflare API key and, with it, production secrets.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">GitBook says it detected unauthorized activity at 18:10 UTC, fixed the SSO flaw at 19:58, and at 20:32 disabled compromised accounts and took the app offline on purpose. &#8220;Once the attacker was in our cloud infrastructure, keeping the platform running meant they could keep looking for access while we worked. We chose a longer outage over that risk.&#8221; Cached published sites stayed up for part of the window.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">While offline, GitBook rotated every infrastructure secret and every GitBook-managed customer secret, invalidated API tokens issued before a cutoff, recycled staging and production nodes, and reversed what the compromised service account had done.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">An earlier customer update, on November 3, already described &#8220;a sophisticated, highly targeted attack using AI agents.&#8221; The post-mortem leans into that reading: &#8220;The attacker moved with a speed and precision that pointed to an attack driven largely by automation and AI.&#8221; GitBook compares the moment to late-2025 reporting in which AI carried out most of the tactical work in a campaign, and says the sophistication &#8220;would&#8217;ve been unthinkable a few years ago.&#8221;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What customers still need to do<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">GitBook rotated Git Sync keys for GitHub and GitLab itself. Customers still need to:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Create a new GitBook API token (personal tokens were revoked; apps must be updated).<\/li><li>Rotate third-party tokens used to connect other tools to GitBook, and secrets used by published integrations.<\/li><li>If using authenticated access with a custom backend, regenerate the signing key.<\/li><li>If using the GitBook MCP server, re-authenticate it (per the November 3 update).<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">GitBook also published three indicator IPs: 94.183.188.91, 45.139.84.195 and 198.251.83.217, and asked customers to search their own environments for them.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What it means<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This is a SaaS supply-chain story as much as a GitBook story. A documentation platform holds API tokens, Git access and the questions people ask an assistant. GitBook&#8217;s own lesson list is the right one: forgotten credentials, response speed, and the fact that every SaaS vendor is now part of its customers&#8217; perimeter. The AI element, as GitBook describes it, is speed and precision after the first identity hole was opened \u2014 not a magical bypass of SSO by a model acting alone.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u270d\ufe0f About the analysis<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This i10x report is based on GitBook&#8217;s official November 2026 post-mortem and the earlier status updates on that page, signed by CEO Sara Tandowsky and CTO Samy Pess\u00e9. i10x did not have access to GitBook&#8217;s investigation materials.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Sources<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/www.gitbook.com\/status\/security-incident-2026-11-03\" target=\"_blank\" rel=\"noreferrer noopener\">GitBook: Security incident post-mortem, November 2026<\/a><\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>On November 2, 2026, an attacker used a GitBook SSO flaw to impersonate staff, reached internal repositories and a Cloudflare API key, and then gained full infrastructure access. GitBook took the product offline for about 16 hours, rotated secrets, and says all customer data should be treated as exposed.<\/p>\n","protected":false},"author":2,"featured_media":7165,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"paper_title":"","paper_url":"","pdf_url":"","doi":"","arxiv_id":"","authors":"","institutions":"","paper_date":"","venue":"","peer_reviewed":false,"code_url":"","data_url":"","funding_coi":"","figure_license":"","paper_license":"","replication":"","study_models":"","study_sample":"","footnotes":"","_yoast_wpseo_primary_category":"65","_nx_sec_severity":"high","_nx_sec_affected":"GitBook","_nx_sec_status":"mitigated","_nx_sec_kicker":"URGENT: GitBook was breached by an AI-driven attack \u2014 rotate tokens"},"categories":[14,65,12,28],"tags":[],"companies":[],"products":[],"class_list":["post-7166","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-agents","category-ai-security","category-policy-safety","category-security-defense"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>GitBook AI-Agent Attack: Secrets Exposed, 16-Hour Outage<\/title>\n<meta name=\"description\" content=\"GitBook\u2019s November 2 security incident used an SSO flaw and AI-driven automation to reach production secrets. The app was down about 16 hours.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/i10xnews.kinsta.cloud\/gitbook-ai-agent-attack-infrastructure-credentials\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"GitBook AI-Agent Attack: Secrets Exposed, 16-Hour Outage\" \/>\n<meta property=\"og:description\" content=\"GitBook\u2019s November 2 security incident used an SSO flaw and AI-driven automation to reach production secrets. The app was down about 16 hours.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/i10xnews.kinsta.cloud\/gitbook-ai-agent-attack-infrastructure-credentials\" \/>\n<meta property=\"og:site_name\" content=\"i10X News\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-03T12:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/gitbook-ai-agent-attack-infrastructure-credentials-title.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Christopher Ort\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:site\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christopher Ort\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/gitbook-ai-agent-attack-infrastructure-credentials#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/gitbook-ai-agent-attack-infrastructure-credentials\"},\"author\":{\"name\":\"Christopher Ort\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\"},\"headline\":\"GitBook: An AI-Agent Attack Reached Infrastructure Credentials and Forced a 16-Hour Outage\",\"datePublished\":\"2026-11-03T12:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/gitbook-ai-agent-attack-infrastructure-credentials\"},\"wordCount\":708,\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/gitbook-ai-agent-attack-infrastructure-credentials#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/gitbook-ai-agent-attack-infrastructure-credentials-title.webp\",\"articleSection\":[\"Agents\",\"AI Security\",\"Policy &amp; Safety\",\"Security &amp; Defense\"],\"inLanguage\":\"en-US\",\"dateModified\":\"2026-11-03T12:00:00+00:00\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/gitbook-ai-agent-attack-infrastructure-credentials\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/gitbook-ai-agent-attack-infrastructure-credentials\",\"name\":\"GitBook AI-Agent Attack: Secrets Exposed, 16-Hour Outage\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/gitbook-ai-agent-attack-infrastructure-credentials#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/gitbook-ai-agent-attack-infrastructure-credentials#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/gitbook-ai-agent-attack-infrastructure-credentials-title.webp\",\"datePublished\":\"2026-11-03T12:00:00+00:00\",\"description\":\"GitBook\u2019s November 2 security incident used an SSO flaw and AI-driven automation to reach production secrets. The app was down about 16 hours.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/gitbook-ai-agent-attack-infrastructure-credentials#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/gitbook-ai-agent-attack-infrastructure-credentials\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/gitbook-ai-agent-attack-infrastructure-credentials#primaryimage\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/gitbook-ai-agent-attack-infrastructure-credentials-title.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/gitbook-ai-agent-attack-infrastructure-credentials-title.webp\",\"width\":1344,\"height\":768,\"caption\":\"A documentation office at night, empty desks and a wall-mounted status screen glowing in an otherwise dark room.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/gitbook-ai-agent-attack-infrastructure-credentials#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/i10x.ai\\\/news\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"GitBook: An AI-Agent Attack Reached Infrastructure Credentials and Forced a 16-Hour Outage\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\",\"name\":\"i10X News\",\"description\":\"Stay updated with the latest news and announcements from i10X.\",\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/i10x.ai\\\/news?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\",\"name\":\"i10X\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"contentUrl\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"width\":180,\"height\":180,\"caption\":\"i10X\"},\"image\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/i10x_ai\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/i10x-ai\",\"https:\\\/\\\/instagram.com\\\/i10x.ai\",\"https:\\\/\\\/www.youtube.com\\\/@i10X_ai_official\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\",\"name\":\"Christopher Ort\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"caption\":\"Christopher Ort\"},\"description\":\"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/author\\\/christopher-ort\",\"sameAs\":[\"https:\\\/\\\/i10x.ai\\\/blog\\\/author\\\/christopher-ort\"],\"worksFor\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"alumniOf\":{\"@type\":\"EducationalOrganization\",\"name\":\"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)\",\"url\":\"https:\\\/\\\/www.fau.eu\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"GitBook AI-Agent Attack: Secrets Exposed, 16-Hour Outage","description":"GitBook\u2019s November 2 security incident used an SSO flaw and AI-driven automation to reach production secrets. The app was down about 16 hours.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/i10xnews.kinsta.cloud\/gitbook-ai-agent-attack-infrastructure-credentials","og_locale":"en_US","og_type":"article","og_title":"GitBook AI-Agent Attack: Secrets Exposed, 16-Hour Outage","og_description":"GitBook\u2019s November 2 security incident used an SSO flaw and AI-driven automation to reach production secrets. The app was down about 16 hours.","og_url":"https:\/\/i10xnews.kinsta.cloud\/gitbook-ai-agent-attack-infrastructure-credentials","og_site_name":"i10X News","article_published_time":"2026-11-03T12:00:00+00:00","og_image":[{"width":1344,"height":768,"url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/gitbook-ai-agent-attack-infrastructure-credentials-title.webp","type":"image\/webp"}],"author":"Christopher Ort","twitter_card":"summary_large_image","twitter_creator":"@i10x_ai","twitter_site":"@i10x_ai","twitter_misc":{"Written by":"Christopher Ort","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/i10xnews.kinsta.cloud\/gitbook-ai-agent-attack-infrastructure-credentials#article","isPartOf":{"@id":"https:\/\/i10xnews.kinsta.cloud\/gitbook-ai-agent-attack-infrastructure-credentials"},"author":{"name":"Christopher Ort","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a"},"headline":"GitBook: An AI-Agent Attack Reached Infrastructure Credentials and Forced a 16-Hour Outage","datePublished":"2026-11-03T12:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/gitbook-ai-agent-attack-infrastructure-credentials"},"wordCount":708,"publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/gitbook-ai-agent-attack-infrastructure-credentials#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/gitbook-ai-agent-attack-infrastructure-credentials-title.webp","articleSection":["Agents","AI Security","Policy &amp; Safety","Security &amp; Defense"],"inLanguage":"en-US","dateModified":"2026-11-03T12:00:00+00:00"},{"@type":"WebPage","@id":"https:\/\/i10xnews.kinsta.cloud\/gitbook-ai-agent-attack-infrastructure-credentials","url":"https:\/\/i10xnews.kinsta.cloud\/gitbook-ai-agent-attack-infrastructure-credentials","name":"GitBook AI-Agent Attack: Secrets Exposed, 16-Hour Outage","isPartOf":{"@id":"https:\/\/i10x.ai\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/gitbook-ai-agent-attack-infrastructure-credentials#primaryimage"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/gitbook-ai-agent-attack-infrastructure-credentials#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/gitbook-ai-agent-attack-infrastructure-credentials-title.webp","datePublished":"2026-11-03T12:00:00+00:00","description":"GitBook\u2019s November 2 security incident used an SSO flaw and AI-driven automation to reach production secrets. The app was down about 16 hours.","breadcrumb":{"@id":"https:\/\/i10xnews.kinsta.cloud\/gitbook-ai-agent-attack-infrastructure-credentials#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/i10xnews.kinsta.cloud\/gitbook-ai-agent-attack-infrastructure-credentials"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10xnews.kinsta.cloud\/gitbook-ai-agent-attack-infrastructure-credentials#primaryimage","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/gitbook-ai-agent-attack-infrastructure-credentials-title.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/gitbook-ai-agent-attack-infrastructure-credentials-title.webp","width":1344,"height":768,"caption":"A documentation office at night, empty desks and a wall-mounted status screen glowing in an otherwise dark room."},{"@type":"BreadcrumbList","@id":"https:\/\/i10xnews.kinsta.cloud\/gitbook-ai-agent-attack-infrastructure-credentials#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/i10x.ai\/news"},{"@type":"ListItem","position":2,"name":"GitBook: An AI-Agent Attack Reached Infrastructure Credentials and Forced a 16-Hour Outage"}]},{"@type":"WebSite","@id":"https:\/\/i10x.ai\/news\/#website","url":"https:\/\/i10x.ai\/news","name":"i10X News","description":"Stay updated with the latest news and announcements from i10X.","publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/i10x.ai\/news?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/i10x.ai\/news\/#organization","name":"i10X","url":"https:\/\/i10x.ai\/news\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/","url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","contentUrl":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","width":180,"height":180,"caption":"i10X"},"image":{"@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/i10x_ai","https:\/\/www.linkedin.com\/company\/i10x-ai","https:\/\/instagram.com\/i10x.ai","https:\/\/www.youtube.com\/@i10X_ai_official"]},{"@type":"Person","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a","name":"Christopher Ort","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","caption":"Christopher Ort"},"description":"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.","url":"https:\/\/i10x.ai\/news\/author\/christopher-ort","sameAs":["https:\/\/i10x.ai\/blog\/author\/christopher-ort"],"worksFor":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"alumniOf":{"@type":"EducationalOrganization","name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)","url":"https:\/\/www.fau.eu"}}]}},"_links":{"self":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/7166","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/comments?post=7166"}],"version-history":[{"count":0,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/7166\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media\/7165"}],"wp:attachment":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media?parent=7166"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/categories?post=7166"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/tags?post=7166"},{"taxonomy":"company","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/companies?post=7166"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/products?post=7166"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}