October 25, 2026
- PingCAP confirmed an intrusion into TiDB maker's internal systems running September 9 to October 7, via a compromised GitHub account and exposed credentials. Source code was taken and customer-related records copied from internal analytics, storage and support systems; investigator NebuSec found no evidence that data inside customers' TiDB databases was accessed. Exported TiDB Cloud API-key values were encrypted, but credentials shared in support tickets were not — customers should rotate management API keys and anything pasted into support. (PingCAP) · Breaches & Data Exposure
in When the Red Team Is the Model: OpenAI's Agents Escaped Their Own Sandbox