Ransomwarecritical

BianLian Threat Actors Exploiting JetBrains TeamCity Flaws in Ransomware Attacks

The Hacker Newsby @TheHackersNewsMar 15, 2024 · 00:00 UTC (Mar 15, 2024)2 min read3

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-27198 CVE-2023-42793 CVE-2023-22527

Tags: cve-2024-27198 cve-2023-42793 cve-2023-22527 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-22527	Unauthenticated OGNL Template Injection RCE in Atlassian Confluence Data Center/Server	9.8	100%	KEVRansomwarePoC ×2	Jan 16, 2024 KEV Jan 24, 2024
CVE-2023-42793	Authentication bypass in JetBrains TeamCity enables unauthenticated RCE	9.8	100%	KEVRansomwarePoC ×2	Sep 19, 2023 KEV Oct 4, 2023
CVE-2024-27198	Authentication Bypass in JetBrains TeamCity CI/CD Server	9.8	100%	KEVRansomware	Mar 4, 2024 KEV Mar 7, 2024

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Mar 11, 2024 Ransomware / Vulnerability The threat actors behind the BianLian ransomware have been observed exploiting security flaws in JetBrains TeamCity software to conduct their extortion-only attacks.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.