GitBook breached by sophisticated AI-agent attack, customer API tokens may be exposed
punchmesan · hn · 2026-11-04
GitBook disclosed a targeted attack executed with AI agents on Nov 2, in which the attacker gained access to infrastructure credentials. GitBook took services offline, rotated all credentials and invalidated customer API tokens. Data possibly accessed includes Git Sync secrets, API tokens, third-party integration tokens, and GitBook Assistant queries. Users must rotate tokens and re-auth MCP servers.
More from coding & agent
- Dev proposes LLM-generated ultra-rare content to build anime-style MMORPGs — rickasaurus · 2026-11-04
- Dev builds Chrome extension to bring back the classic Twitter bird on X — joonasvirtanen · 2026-11-04
- Developer lets his app record 'wishes' and auto-spawn OpenCode background agents to fulfill them — SubtleGradient · 2026-11-04
- Post-train your model on your own agent harness with OpenHands, Harbor, SkyRL and Snowflake — StasBekman · 2026-11-04
- Google Antigravity redesign leaked with context usage and quota indicators — clmt · 2026-11-04
- Microsoft's 4B Mage-VL-Cowork Hits 66% on OSWorld-Verified, Near Human Level — microsoft · 2026-11-04