$BTTC Bad news for GitBook users: the technical documentation platform was hacked using AI agents 🛡️
The attack took place on November 2. The attackers gained access to infrastructure secrets, which may have included API tokens, Git Sync keys, and credentials for third-party services.
Git Sync is used to synchronize documentation with GitHub and GitLab repositories, so their keys may also be at risk 😬
In its incident report, GitBook described how the attack unfolded: the hackers created employee sessions by exploiting an SSO vulnerability, then used a misconfigured GitHub app to access internal repositories and a Cloudflare key that provided access to the infrastructure.
The company has already revoked all users’ API tokens. It recommends urgently changing the keys for connected services.#CPITestsDecemberRateOutlook
The attack took place on November 2. The attackers gained access to infrastructure secrets, which may have included API tokens, Git Sync keys, and credentials for third-party services.
Git Sync is used to synchronize documentation with GitHub and GitLab repositories, so their keys may also be at risk 😬
In its incident report, GitBook described how the attack unfolded: the hackers created employee sessions by exploiting an SSO vulnerability, then used a misconfigured GitHub app to access internal repositories and a Cloudflare key that provided access to the infrastructure.
The company has already revoked all users’ API tokens. It recommends urgently changing the keys for connected services.#CPITestsDecemberRateOutlook