Apify detected unauthorized access to parts of its internal systems between November 9-10, discovered the next day, and responded by cutting off the attacker, rotating API tokens and Apify Proxy passwords, and resetting all active sessions. The company also revoked OAuth connections to third-party integrations like GitHub and is telling some customers to reset their two-factor authentication because their 2FA codes may have been exposed.
bleepingcomputer.com
· 2026-11-12
Security researchers at Apiiro discovered that Claude Code's local settings file, which can store approved shell commands verbatim including embedded credentials, is being uploaded to public GitHub repositories. They found over 100,000 instances of this file posted publicly, with roughly 1,100 from 63 organizations containing real secrets like API tokens, database passwords and root logins.
arstechnica.com
· 2026-11-09
GitBook confirmed that on November 2 at 19:00 CET, attackers using AI agents gained unauthorized access to some infrastructure credentials. The company took its app and authenticated docs sites offline while keeping public content cached and live, then restored services after replacing credentials and revoking API tokens. GitBook says the attackers may have accessed Git Sync secrets, API tokens, third-party integration tokens, and visitor questions to GitBook Assistant, though no content appears to have been modified.
news.ycombinator.com
· 2026-11-03
An IT audit leader argues that enterprises are granting autonomous AI agents broad production access via long-lived service accounts, API tokens, and delegated cloud permissions, while focusing security spending on human-user authentication like MFA. These agents can execute code, provision resources, and modify records, effectively acting as privileged users outside traditional interactive access controls.
darkreading.com
· 2026-09-28
GoKawiil