GitBook发布安全事件复盘：攻击指向Trade.xyz，SSO漏洞导致生产环境失陷
GitBook称攻击者利用SSO漏洞进入生产环境并获取客户相关凭证，平台已恢复并轮换密钥。攻击目标疑为Trade.xyz，未发现其他客户内容被篡改。
Loading…
bibibi.ccbibibi.ccLoading…
Connect scattered updates into a story you can understand.
GitBook称攻击者利用SSO漏洞进入生产环境并获取客户相关凭证，平台已恢复并轮换密钥。攻击目标疑为Trade.xyz，未发现其他客户内容被篡改。
PANews, citing an GitBook announcement, stated that some of its infrastructure credentials may have been exposed in an AI AI agent attack;GitBook it has revoked personal API tokens, replaced credentials, and restored services, advising users to rotate relevant keys.
TradeXYZ称其GitBook文档今早出现未授权活动，已于美东时间9:15恢复至此前状态，并建议调查期间不要点击文档链接。