Lessons to Learn From CircleCI's Breach Investigation

Beware: Malware Bypassed Antivirus; Attackers Reused Stolen Single Sign-On Tokens
Essential reading for network defenders: CircleCI's report into its recent breach, which began when malware infected an engineer's laptop. After stealing "a valid, 2FA-backed" single sign-on session cookie, attackers stole customers' secrets and gained unauthorized access to third-party systems.

2fa access antivirus attackers breach circleci cookie customers defenders engineer investigation laptop learn malware network network defenders party report secrets session sign single single sign-on stealing stolen systems third third-party unauthorized access valid