Hacking News
GitBook API Breach Triggers Urgent Security Response
GitBook has urged customers to rotate API keys and third-party credentials after attackers used AI agents to access its infrastructure. The November 2 breach prompted emergency security measures and temporary service disruptions. The company disclosed the incident on November 3, warning that attackers potentially accessed integration tokens, Git Sync secrets, API tokens, and visitor questions submitted through GitBook Assistant. However, its investigation found no evidence of content modifications. GitBook blocked the intrusion, closed the vulnerabilities, and replaced affected credentials. Some services may still experience performance issues, and the company advised customers to rotate third-party credentials and authenticate again.