GitBook Says AI Agents Accessed Infrastructure Credentials

GitBook said attackers using AI agents gained unauthorized access to some of its infrastructure credentials in a targeted attack on Nov. 2, potentially exposing secrets crypto teams use to connect services. The documentation platform said it detected and contained the intrusion immediately. It reported no evidence that hosted content was changed. Information that may have been affected includes integration tokens, Git Sync credentials and API tokens, as well as questions users submitted to GitBook’s AI assistant. GitBook revoked customer API tokens and told users to rotate credentials used with GitBook and third-party services.

Source: TokenPost