🔴 Critical: Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials
-
JetBrains has disclosed a security incident affecting its Cadence service, urging all users to immediately revoke and rotate any credentials or secrets tied to their execution workflows. The breach, discovered last month, involved unknown attackers exploiting a recently disclosed critical vulnerability in TeamCity to gain access to JetBrains' own environment.
The company confirmed that the threat actors leveraged the unpatched TeamCity flaw to infiltrate internal systems, ultimately extracting AWS credentials. While JetBrains has not specified the exact scope of the compromise, the advisory stresses that any credentials used for Cadence executions should be treated as potentially exposed.
Affected users are advised to take the following actions:
- Revoke and rotate all credentials and secrets associated with Cadence executions immediately.
- Audit recent activity logs for any unauthorized access or unusual API calls linked to AWS resources.
- Review TeamCity server configurations for signs of tampering or backdoor accounts.
Cadence is JetBrains' managed service for running background jobs and scheduled tasks, often used in CI/CD pipelines. The incident highlights the cascading risk of unpatched infrastructure tools, as a single overlooked update can expose downstream cloud services.
Source: The Hacker News
Has your organization audited its TeamCity and CI/CD credential stores since this disclosure, and what steps are you taking to verify no third-party access paths remain?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login