[GitBook Infrastructure Received Unauthorized Access, All Personal API Tokens Revoked] GitBook infrastructure credentials received unauthorized access on November 2nd. The platform has revoked all personal API tokens and is requiring users to rotate third-party tokens and keys used to connect to other tools. The attack used an AI agent, and the attacker may have accessed integration tokens, Git Sync keys, API tokens, and issues submitted by visitors to GitBook Assistant. No evidence of modification of customer content has been found. GitBook has blocked the attacker and fixed the vulnerability. Applications, APIs, and published documents have been restored, but some services may still be affected.
