[HN Gopher] CircleCI incident report for January 4, 2023 securit...
___________________________________________________________________
CircleCI incident report for January 4, 2023 security incident
Author : dserodio
Score : 19 points
Date : 2023-01-13 21:21 UTC (1 hours ago)
(HTM) web link (circleci.com)
(TXT) w3m dump (circleci.com)
| [deleted]
| jscheel wrote:
| Buried in the middle of the post is this most-important tidbit:
|
| > Though all the data exfiltrated was encrypted at rest, the
| third party extracted encryption keys from a running process,
| enabling them to potentially access the encrypted data.
| mdeeks wrote:
| Unfortunately this was already a given since there were reports
| of users secrets (canary tokens) being used. They got the
| secrets for sure. It just wasn't clear how many they got. It
| doesn't matter though, you have to assume if you use CircleCI
| then your secrets were stolen. If you haven't rotated them then
| likely the only reason you haven't been compromised yet is out
| of luck.
___________________________________________________________________
(page generated 2023-01-13 23:02 UTC)