🔴 Critical: CISA: Ransomware gangs now exploiting critical TeamCity flaw
-
CISA has issued a warning that ransomware operators are now exploiting a critical JetBrains TeamCity vulnerability, adding it to the agency's list of flaws known to be actively abused in attacks. The flaw was originally patched back in July, but threat actors have since adopted it as an entry point for ransomware deployments, prompting federal agencies to treat it as an urgent patching priority.
The vulnerability affects on-premises TeamCity servers, which are widely used for continuous integration and build management. Because these systems often hold sensitive credentials and have broad access to internal development pipelines, a compromised server can give attackers a foothold deep inside an organization's infrastructure. CISA's guidance directs federal agencies to apply the available fixes or take mitigating steps as soon as possible.
Key points for defenders:
- The vulnerability is actively exploited by ransomware gangs, not just theoretical.
- A patch has been available since July; unpatched internet-facing servers remain at risk.
- On-premises TeamCity instances are the primary concern.
- Federal agencies are required to remediate under CISA's binding directives.
Administrators running self-hosted TeamCity should verify their version against JetBrains' July security release, apply the update immediately if they haven't already, and review logs for signs of unauthorized access. Rotating any credentials or tokens stored on the server is also worth considering if compromise is suspected.
Source: BleepingComputer
Has your organization already patched its TeamCity servers, or are you still working through the remediation?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login