PingCAP confirms a breach, and the attacker's report says the keys were in the repoPingCAP, the company behind TiDB, posted that it found unauthorized access to some of its internal systems, took containment measures and brought in independent security firms. It says there is no evidence that user data stored in TiDB was affected, and that more updates are coming. Arpit Bhayani quoted the attackers' own report, which alleges they replicated PingCAP's control plane database using GCP service account keys and an Azure service principal committed to PingCAP's repositories, and that engineers pasted customer production credentials into Jira tickets. Those are the attackers' claims, not PingCAP's, and he flags them as allegations.
|
Three weeks of logs on a small site: the search bots leadOAI-SearchBot 5,900 requests, Googlebot 3,900 Filip Raab pulled three weeks of server logs for a small cost of living site. OAI-SearchBot made 5,900 requests and Amazonbot 5,700, against 3,900 from Googlebot and 2,200 from Bingbot. PerplexityBot made 2,100 and ClaudeBot 440. On this site Google is no longer the biggest visitor, and none of these are paying customers.
|
64% of a day's requests were AI crawlers, then they left3,626 of 5,632 requests Outcrop, a small SEO shop that tests on its own sites, says AI crawlers made 3,626 of the 5,632 requests on one of those sites on Oct 18. The next day their share was about 1%. One spike like that is enough to make a traffic chart lie for a whole week.
|