// year
Every incident with a disclosure date in 2023, sorted by date.
1 incident indexed
Malware on a CircleCI engineer's laptop stole a 2FA-backed session token, giving the attacker production access to customer environment variables and any secrets stored in CircleCI.