CircleCI probe links malware placed on engineer’s laptop to larger breach

An unauthorized actor, after stealing a valid SSO session, was able to exfiltrate data, including customer environment variables, tokens and keys.

actor breach circleci customer data engineer environment exfiltrate data keys laptop links malware probe session sso stealing tokens valid