CircleCI Security Incident – “Rotate any secrets stored in CircleCI”
Full e-mail I received https://i.imgur.com/Nz1tEfu.png https://circleci.com/blog/january-4-2023-security-alert/ -- We wanted to make you aware that we are currently investigating a security incident, and that our investigation is ongoing. We will provide you updates about this incident, and our response, as they become available. At this point, we are confident that there are no unauthorized actors active in our systems; however, out of an abundance of caution, we want to ensure that all customers take certain preventative measures to protect your data as well. Action request: Out of an abundance of caution, we strongly recommend that all customers take the following actions: - Immediately rotate any and all secrets stored in CircleCI. These may be stored in project environment variables or in contexts. - We also recommend customers review internal
Why it failed
Full e-mail I received https://i.imgur.com/Nz1tEfu.png https://circleci.com/blog/january-4-2023-security-alert/ -- We wanted to make you aware that we are currently investigating a security incident, and that our investigation is ongoing. W
- Kind
- startup
- Status
- Shut down
- Inventor
- dotty-
- Ended
- 2023
- Source
- hackernews