GitBook has urged customers to rotate API keys and third-party credentials after attackers used AI agents to access its infrastructure. The November 2 breach prompted emergency security measures and temporary service disruptions.
The company disclosed the incident on November 3, warning that attackers potentially accessed integration tokens, Git Sync secrets, API tokens and visitor questions submitted through GitBook Assistant. However, its investigation found no evidence of content modifications.
GitBook Revokes Customer API Tokens After Breach
GitBook said attackers gained unauthorized access to infrastructure credentials at 19:00 CET on November 2. The company blocked the intrusion, closed the vulnerabilities and replaced affected credentials.
Related: Justin Sun Seeks Sanctions Against World Liberty Over Undisclosed UAE Ownership
It also revoked all customer personal API tokens before restoring its application, API and published documentation. However, some services may still experience performance issues.
GitBook advised customers to rotate third-party credentials, published integration secrets and existing API tokens. Users connecting through its MCP server must also authenticate again.
Trade.xyz Warns Users Against Documentation Links
The incident follows a separate security warning from trade.xyz on November 2. The platform reported unauthorized activity affecting its GitBook documentation.
Trade.xyz restored its previous documentation version by 9:15 AM ET. However, it advised users against clicking documentation links during its investigation.
Blockaid also identified 12 compromised websites on October 31, including Flap, Kintsu and StonkFun, in a separate report of affected DeFi platforms.
Related: $108M Crypto Heist Exposes a Major Weakness in Exchange Security
Disclaimer: The information presented in this article is for informational and educational purposes only. The article does not constitute financial advice or advice of any kind. Coin Edition is not responsible for any losses incurred as a result of the utilization of content, products, or services mentioned. Readers are advised to exercise caution before taking any action related to the company.
