Jan. 6, 2023, 12:01 p.m. | /u/akostadi

cybersecurity www.reddit.com

As many know, [CircleCI was hacked recently](https://circleci.com/blog/january-4-2023-security-alert/) and they advise to rotate all secrets. But there is quiet an issue especially with SSH keys and their advice:


> **Project SSH keys**: Go to Project Settings > SSH Keys. Delete the Deploy Key and add it again. If you were using any additional keys, then those need to be deleted and recreated.


This advice is harmful because removing these keys does not remove them from the target system (usually github). It …

advice breach circleci cybersecurity delete github go to important key keys project remove settings ssh ssh keys system systems target

Social Engineer For Reverse Engineering Exploit Study

@ Independent study | Remote

Offensive Security Engineer

@ Ivanti | United States, Remote

Senior Security Engineer I

@ Samsara | Remote - US

Senior Principal Information System Security Engineer

@ Chameleon Consulting Group | Herndon, VA

Junior Detections Engineer

@ Kandji | San Francisco

Data Security Engineer/ Architect - Remote United States

@ Stanley Black & Decker | Towson MD USA - 701 E Joppa Rd Bg 700