GitBook SSO Flaw Led to 16-Hour Outage, Unauthorized Production Access

Cointime update: GitBook disclosed that an attacker exploited a vulnerability in its SSO login flow on November 2 to forge an employee session, accessing production keys and gaining full infrastructure privileges via a misconfigured GitHub App. The company contained the breach by November 3, with service restored after about 16 hours of downtime. GitBook said billing information, passwords and IP addresses were not exposed, and is treating all customer data as compromised.