CircleCI probe links malware placed on engineer's laptop to larger breach
Cybersecurity News
Stay updated with breaking news from Rob Zuber. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
Cybersecurity News
The company strongly recommends that users rotate “any and all secrets” stored in CircleCI, including those stored in project environment variables or contexts. It also advises users to “review internal logs for any unauthorized access starting from Dec. 21, 2022, through Jan. 4, 2023.”
Application developers using the CircleCI continuous integration platform are being urged to rotate all secrets -- including passwords, API keys, and digital certificates -- stored in the system, after the discovery of an unspecified security incident. In a blog Wednesday, company chief technology officer (CTO) Rob Zuber said this includes secrets stored in project environment
The DevOps platform, popular with startup engineers, warned customers to take action following a December breach.
DevOps platform CircleCI warns users about security breach - SiliconANGLE