GitBook hit by AI-agent attack: API tokens and secrets may be exposed
GitBook disclosed a targeted attack in which an intruder gained unauthorized access to some of its infrastructure credentials on the evening of November 2. The company replaced all credentials and invalidated customer API tokens, warning that Git Sync secrets, GitBook and third-party API tokens, and questions visitors asked GitBook Assistant may have been accessed.
