https://pwn.watch/t/circleci Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Fri, 13 Jan 2023 00:00:00 GMT https://pwn.watch/i/circleci-security-incident-rotate-all-secrets-2023 https://pwn.watch/i/circleci-security-incident-rotate-all-secrets-2023 Fri, 13 Jan 2023 00:00:00 GMT critical <p>Malware on a CircleCI engineer's laptop stole a 2FA-backed SSO session. The attacker then exfiltrated customer environment variables, tokens and keys along with the encryption keys, so CircleCI told every customer to rotate all secrets stored in the platform.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> no-fix-needed</p> <p><strong>Latest updates:</strong></p><ul><li>2023-01-13: Incident report: malware stole an engineer's SSO session in December 2022; customer data and encryption keys were exfiltrated (<a href="https://circleci.com/blog/jan-4-2023-incident-report/">source</a>)</li><li>2023-01-04: CircleCI tells all customers to rotate every secret stored in CircleCI (<a href="https://circleci.com/blog/january-4-2023-security-alert/">source</a>)</li></ul>