Github Oauth News Today

Build custom software on top of your data with Appsmith. Streamline operations, automate processes, and integrate multiple apps.

Beware of fake Python libraries! 27 malicious packages found on PyPI, disguised as legitimate ones.

DevOps platform CircleCI recently fell victim to a breach after an employee's laptop was hacked. Attacker used malware to steal 2FA-backed credentials

Hackers breached CircleCi in December after an engineer became infected with information-stealing malware that stole the employees 2FA-backed SSO session, allowing access to the companys internal systems.

CircleCI revealed in a late Friday update that a breach of their IT systems last December was done through the compromise of an employee's laptop and credentials, both of which were used to steal valuable internal and customer data. The company is now working with multiple third-party providers to rotate secrets, tokens and is aware of "less than five" customers who have reported unauthorized access to their third-party applications following the hack.

Cybersecurity News

CircleCI customers must rotate any secrets stored in its platform and replace Project API tokens to protect against problems from the company's recent security incident. Here's how to follow the guidance and prepare for the future security incidents in software development environments.

Following the CircleCI security breach on Jan.4, when the company urged its users to rotate all secrets stored in the platform, researchers at Mitiga published a technical blog today highlighting the potential impact of the incident on other SaaS and Cloud providers that interact with CircleCI platform, and offering further guidance on how organizations can detect malicious activities comprehensively across third-party applications.  

The coming new year is a good moment for chief information security officers to reflect upon what they've learned this year and how to apply this knowledge going forward.

The coming new year is a good moment for chief information security officers to reflect on what they've learned this year and how to apply this knowledge going forward.