Hacker News

points by latchkey 4 days ago | 0 comments

One thing that would be appreciated are more details in these sorts of reports.

"the attacker gained unauthorized access to some of our infrastructure credentials"

How? Which infrastructure?

We’ll provide details in a long post-mortem. For now, it was important to notify our users as early as possible.

two days later...

Sorry about that, I should have posted here. We posted a post mortem yesterday: https://www.gitbook.com/status/security-incident-2026-11-03

Thanks Samy.

"Using a flaw in GitBook’s SSO login flow, they were able to create login sessions acting as GitBook staff."

Since this has now been closed, can we have more details on what happened?