Gitbook Breached

49 points | by punchmesan 1 hour ago

7 comments

  • SamyPesse 1 minute ago
    GitBook’s CTO here

    We have been dealing with a security attack since yesterday. Our team has been all hands on deck since the start, and we took a large portion of our services offline to prioritize user security.

    Our service is progressively coming back online (most of it already is), and we are actively monitoring the situation.

    We’ll continue to actively keep our users updated through emails, Slack, and our status page as we monitor the situation and learn more.

  • latchkey 0 minutes ago
    One thing that would be appreciated are more details in these sorts of reports.

    "the attacker gained unauthorized access to some of our infrastructure credentials"

    How? Which infrastructure?

  • manytimesaway 49 minutes ago
    FYI, Gitbook was made by the team behing friendco.de, which they killed without any announcement years ago.
  • petecooper 58 minutes ago
    • philipwhiuk 4 minutes ago
      It's bizarre they have both this and gitbookstatus.com and they contain different info.
  • aliasxneo 47 minutes ago
    "GitBook has been the target of a sophisticated, highly targeted attack using AI agents."

    Add it to the list, I guess.

    • nsoam 7 minutes ago
      Is this what they mean when they talk about accountability laundering?

      Oh, you see, we had the best security ever, but they used AI agents, and there's no defence for that, you can't secure a system against those spooky AI agents.

  • punchmesan 1 hour ago
    Oof that formatting is rougher than I thought. Will try to clean it up after I'm done reconfiguring gitbook...
    • verdverm 50 minutes ago
      new lines between bullets, only italics available, not markdown
  • philipwhiuk 1 hour ago
    This is the public disclosure: https://www.gitbookstatus.com/incidents/01M6FXDDGQRWHMYYWXY2...

    Note that the summary at the top of https://www.gitbookstatus.com at time of writing does not mention the unauthorized access and the incident details does not mention the contents disclosed above.