"Ransomware Gangs Exploit Critical JetBrains TeamCity Vulnerability"
TL;DR
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned of an actively exploited critical security flaw in JetBrains TeamCity On-Premises software, allowing for complete compromise of a server by a remote unauthenticated attacker. The vulnerability, tracked as CVE-2024-27198, has been used by threat actors to deliver ransomware and create rogue user accounts. Users are urged to apply updates immediately, with federal agencies required to patch their instances by March 28, 2024.
Topics:technologycybersecurity#authentication-bypass#cisa#cybersecurity#exploitation#jetbrains-teamcity#vulnerability
- CISA Warns of Actively Exploited JetBrains TeamCity Vulnerability The Hacker News
- Critical TeamCity Vulnerability Exploitation Started Immediately After Disclosure SecurityWeek
- JetBrains TeamCity critical flaw exploited; 1.4k servers compromised SC Media
- JetBrains TeamCity under attack by ransomware thugs after disclosure mess The Register
- TeamCity supply chain bugs receive massive exploitation CSO Online
Want the full story? Read the original reporting
Read on The Hacker News