Search: “teamcity”

113 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 43 Ransomware 20 Threat actor 13 Exploit / PoC 10 Malware 7 Data breach 6 Industry 5 Phishing & fraud 2 Policy & legal 2 AI tools & infra 2 AI industry 1 Tools 1 AI safety & security 1

SeverityAll critical 73 high 24 medium 6 low 6 info 4

Critical Security Issue Affecting TeamCity On-Premises (CVE-2026-63077 ...

JetBrains fixed critical unauthenticated RCE CVE-2026-63077 in TeamCity On-Premises; update to 2025.11.7 or 2026.1.3.

JetBrains disclosed CVE-2026-63077, a critical unauthenticated remote code execution vulnerability affecting all TeamCity On-Premises versions. An attacker with HTTP(S) access can bypass authentication checks via the TeamCity agent polling protocol and execute arbitrary operating system commands with the privileges of the server process. Fixes are available in versions 2025.11.7 and 2026.1.3, plus a security patch plugin for TeamCity 2017.1+. JetBrains states there is no evidence of active exploitation at disclosure time, and TeamCity Cloud is already mitigated.

Web discovery (articles for new exploits & KEV entries)Sep 8, 21:42 UTC · 7d agoVulnerability CVE-2026-63077

JetBrains fixes critical unauthenticated RCE in TeamCity On-Premises (CVE-2026-63077)

Help Net SecurityAug 6, 06:54 UTC · Aug 6, 2026Vulnerability in the wildCVE-2026-63077

You're deploying it wrong! TeamCity, Subversion & Web Deploy part 5: Web Deploy with TeamCity

Troy HuntNov 26, 00:00 UTC · Nov 26, 2010Industry

Threat actors actively exploit JetBrains TeamCity flaws to deliver malware

Security AffairsMar 20, 15:06 UTC · Mar 20, 2024Malware in the wildCVE-2024-27198 CVE-2024-27199 CVE-2024-23917

You're deploying it wrong! TeamCity, Subversion & Web Deploy part 4: Continuous builds with TeamCity

Troy HuntNov 25, 00:00 UTC · Nov 25, 2010AI safety & security

U.S. CISA adds a JetBrains TeamCity flaw to its Known Exploited Vulnerabilities catalog

Security AffairsAug 6, 08:22 UTC · Aug 6, 2026Exploit / PoC in the wildCVE-2026-63077

Russian hackers target unpatched JetBrains TeamCity servers

Help Net SecurityDec 14, 00:00 UTC · Dec 14, 2023Vulnerability CVE-2023-427931

Alert! Patch your TeamCity instance to avoid server hack

Security AffairsSep 25, 11:43 UTC · Sep 25, 2023Vulnerability CVE-2023-42793

JetBrains Patches CVSS 9.8 TeamCity Flaw Allowing Server Takeover

Security AffairsJul 28, 11:17 UTC · Jul 28, 2026Vulnerability in the wildCVE-2026-63077

JetBrains TeamCity vulnerability allows privilege escalation, API exposure (CVE-2026-44413)

Help Net SecurityMay 12, 00:00 UTC · May 12, 2026Vulnerability CVE-2026-44413 CVE-2023-42793 CVE-2024-27198+1 CVEs1

Critical JetBrains TeamCity On-Premises Flaws Could Lead to Server Takeovers

The Hacker NewsMar 5, 03:34 UTC · Mar 5, 2024Vulnerability in the wildCVE-2024-27198 CVE-2024-27199 CVE-2024-23917

Critical vulnerabilities in TeamCity JetBrains fixed, release of technical details imminent, patch quickly! (CVE-2024-27198, CVE-2024-27199)

Help Net SecurityMar 7, 09:16 UTC · Mar 7, 2024Vulnerability CVE-2024-27198 CVE-2024-27199

TeamCity Users Urged to Patch Critical Vulnerabilities

Infosecurity MagazineMar 5, 09:30 UTC · Mar 5, 2024Vulnerability CVE-2024-27198 CVE-2024-27199

Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In

The Hacker NewsJul 28, 08:11 UTC · Jul 28, 2026Exploit / PoC in the wildCVE-2026-63077

CISA adds JetBrains TeamCity bug to its Known Exploited Vulnerabilities catalog

Security AffairsMar 9, 19:43 UTC · Mar 9, 2024Exploit / PoC in the wildCVE-2024-27198 CVE-2024-27199

Experts disclosed two flaws in JetBrains TeamCity On

Security AffairsMar 5, 08:19 UTC · Mar 5, 2024Vulnerability CVE-2024-27198 CVE-2024-27199 CVE-2024-23917

Experts warn of critical JetBrains TeamCity On

Security AffairsFeb 7, 15:13 UTC · Feb 7, 2024Vulnerability CVE-2024-23917 CVE-2023-42793

Russian SVR-Linked APT29 Targets JetBrains TeamCity Servers in Ongoing Attacks

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2023Threat actor in the wildCVE-2023-42793

On-premises JetBrains TeamCity servers vulnerable to auth bypass (CVE-2024-23917)

Help Net SecurityFeb 15, 11:49 UTC · Feb 15, 2024Vulnerability CVE-2024-23917 CVE-2023-42793

North Korea-linked APT groups actively exploit JetBrains TeamCity flaw

Security AffairsOct 19, 10:17 UTC · Oct 19, 2023Threat actor in the wildCVE-2023-42793

Critical JetBrains TeamCity Flaw Could Expose Source Code and Build Pipelines to Attackers

The Hacker NewsOct 2, 11:09 UTC · Oct 2, 2023Ransomware in the wildCVE-2023-42793 CVE-2023-36618 CVE-2023-366191

Continuous Web.config security analysis with WCSA and TeamCity

Troy HuntMar 23, 00:00 UTC · Mar 23, 2011Industry

Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

Unknown attackers exploited critical TeamCity flaw CVE-2026-63077 to breach JetBrains Cadence, stealing a 2024 backup, user data, and AWS credentials; rotation urged.

JetBrains disclosed that threat actors exploited CVE-2026-63077 (CVSS 9.8), a TeamCity deserialization vulnerability added to CISA's KEV catalog on August 5, 2026, to breach its Cadence cloud computing service, with the intrusion running August 8-24, 2026. Confirmed access includes personal data (usernames, names, emails, login timestamps, IPs), a full 2024 Cadence server backup containing credentials and configuration, multiple AWS IAM users and secrets, files in JetBrains S3 buckets, and possibly PyCharm-synchronized source code. The compromised api.cadence.jetbrains.com server has been taken offline and all Cadence plugin access tokens invalidated. JetBrains urges users to immediately revoke or rotate all credentials used with Cadence and treat all executions, inputs, and outputs as potentially untrusted.

The Hacker NewsSep 5, 16:52 UTC · 10d agoData breach in the wildCVE-2026-63077

Critical JetBrains TeamCity vulnerability could be exploited to launch supply chain attacks (CVE-2023-42793)

Help Net SecurityFeb 15, 12:03 UTC · Feb 15, 2024Vulnerability in the wildCVE-2023-42793

U.S. CISA adds Cisco Catalyst, Kentico Xperience, PaperCut NG/MF, Synacor ZCS, Quest KACE SMA, and JetBrains TeamCity flaws to its Known Exploited Vulnerabilities catalog

Security AffairsApr 21, 09:21 UTC · Apr 21, 2026Exploit / PoC in the wildCVE-2026-20133 CVE-2023-27351 CVE-2024-27199+5 CVEs

BianLian group exploits JetBrains TeamCity bugs in ransomware attacks

Security AffairsMar 11, 14:47 UTC · Mar 11, 2024Ransomware CVE-2024-27198 CVE-2023-42793

Critical JetBrains TeamCity On-Premises Flaw Exposes Servers to Takeover

The Hacker NewsFeb 7, 05:05 UTC · Feb 7, 2024Ransomware in the wildCVE-2024-23917 CVE-2023-42793

Microsoft Warns of North Korean Attacks Exploiting JetBrains TeamCity Flaw

The Hacker NewsOct 19, 07:15 UTC · Oct 19, 2023Vulnerability CVE-2023-42793

CISA adds JetBrains TeamCity and Windows flaws to its Known Exploited Vulnerabilities catalog

Security AffairsOct 5, 13:03 UTC · Oct 5, 2023Exploit / PoC in the wildCVE-2023-42793 CVE-2023-28229 CVE-2023-4211

You're deploying it wrong! TeamCity, Subversion & Web Deploy part 1: Config transforms

Troy HuntNov 22, 00:00 UTC · Nov 22, 2010Policy & legal

Australia Warns of Active Exploitation of Critical TeamCity Server Flaw

Australian officials warn of active exploitation of a critical JetBrains TeamCity flaw and urge customers to patch immediately.

Australian authorities warn that a critical vulnerability in JetBrains TeamCity is being actively exploited and urge customers to apply patches. The alert follows a similar warning from the US government. TeamCity is a widely deployed CI/CD server whose past flaws have been leveraged in large-scale exploitation campaigns.

Infosecurity MagazineAug 25, 11:00 UTC · 22d agoExploit / PoC in the wild