Rob Zuber News Today

A number of third-party software providers announced new integrations with AWS, partnerships, or other features that AWS customers can utilize.

Tech teams that have a little breathing room in the summer can use the time to tackle a variety of tasks that may get short shrift during busy periods.

The weeks-long compromise of CI/CD vendor CircleCI highlights a growing risk: rogue and compromised developer accounts, requiring a security reset for DevOps organizations.

DevOps platform CircleCI recently fell victim to a breach after an employee's laptop was hacked. Attacker used malware to steal 2FA-backed credentials

In a post-mortem, CircleCi blamed malware stole an employee's session token allowing intruders to access customer data.

Cybersecurity News

The company strongly recommends that users rotate “any and all secrets” stored in CircleCI, including those stored in project environment variables or contexts. It also advises users to “review internal logs for any unauthorized access starting from Dec. 21, 2022, through Jan. 4, 2023.” 

Application developers using the CircleCI continuous integration platform are being urged to rotate all secrets -- including passwords, API keys, and digital certificates -- stored in the system, after the discovery of an unspecified security incident. In a blog Wednesday, company chief technology officer (CTO) Rob Zuber said this includes secrets stored in project environment

The DevOps platform, popular with startup engineers, warned customers to take action following a December breach.

DevOps platform CircleCI warns users about security breach - SiliconANGLE