TeamCity
SoftwareWikipedia
22
MENTIONS
9
EPISODES
9
PODCASTS
Search complete. 22 mentions across 9 episodes found for "TeamCity".
Oct 16, 2026
RichardHOST
We can't confirm this, but it could have been JetBrains integration into like VS Code or something.
Joseph HamiltonHOST
So we do know that JetBrains had a vulnerability in their TeamCity, I think it's called, application.
RichardHOST
And it was big.
Joseph HamiltonHOST
And it was a big, big vulnerability.
Joseph HamiltonHOST
And been as adamant about security as you possibly could be.
Joseph HamiltonHOST
And at the end of the day...
Joseph HamiltonHOST
You know, even the TeamCity vulnerability, that could be, we don't know, I haven't researched a lot into it.
Joseph HamiltonHOST
It could be from code from a repository for a dependency that got introduced into theirs that interacted with another piece of their code they did write that offered this vulnerability.
Patrick GrayHOST
We've got, uh, exploitation of Atlassian flaws, uh, after, you know, a, a POC going out and then it's in the wild.
Patrick GrayHOST
We've got, uh, CISA warning of, uh, what is it? Uh, was it TeamCity by JetBrains? Bugs there getting, uh, exploited.
Patrick GrayHOST
I mean, it's just been...
Patrick GrayHOST
It, it's nonstop at the moment, and I think people really need to get serious finally about reducing their attack surface, because you are not gonna patch, patch your way around this.
Patrick GrayHOST
We've got, uh, exploitation of Atlassian flaws, uh, after, you know, and a, a POC going out and then it's in the wild.
Patrick GrayHOST
We've got, uh, CISA warning of, uh, what is it? Uh, was it TeamCity by JetBrains? Bugs there getting, uh, exploited.
Patrick GrayHOST
I mean, it's just been...
Patrick GrayHOST
It, it's nonstop at the moment, and I think people really need to get serious finally about reducing their attack surface, because you are not gonna patch, patch your way around this.
Noel BradfordHOST
Eventually, yes.
Noel BradfordHOST
But look at TeamCity first.
Noel BradfordHOST
JetBrains disclosed a critical vulnerability in TeamCity on-premises in July.
Noel BradfordHOST
CVE-2026-63077.
Noel BradfordHOST
An attacker who could reach the server could potentially bypass authentication and execute operating system commands.
Noel BradfordHOST
The answer isn't recklessness.
Noel BradfordHOST
It's knowing the environment well enough to make the decision quickly.
Noel BradfordHOST
If that TeamCity server is sitting behind good controls and unreachable from the internet, you've bought yourself some breathing room.
Steve PrenticeHOST
No threat actor or news of ransomware has been released, nor has a clear description of the types of data stolen, being referred to solely as, quote, "certain private and confidential information," end quote.
Steve PrenticeHOST
Ransomware gangs now exploiting critical TeamCity flaw.
Steve PrenticeHOST
CISA is warning federal agencies that ransomware gangs are now exploiting a critical JetBrains TeamCity vulnerability that had been patched in July.
Steve PrenticeHOST
The flaw is a critical authentication bypass vulnerability that lets attackers with HTTPS access execute arbitrary operating system commands by way of the TeamCity agent polling protocol.
Steve PrenticeHOST
The vulnerability was also added to the KEV catalog on August 5th.
Steve PrenticeHOST
Huge thanks to our sponsor, Nudge Security.
Gerald AugerHOST
If you work in healthcare, of course, like if you work in another industry, it may not be as valuable.
Steve PrenticeSOUNDBITE_SPEAKER
Ransomware gangs now exploiting critical TeamCity flaw.
Steve PrenticeSOUNDBITE_SPEAKER
Oh boy.
Steve PrenticeSOUNDBITE_SPEAKER
CISA is warning federal agencies that ransomware gangs are now exploiting a critical JetBrains TeamCity vulnerability that had been patched in July.
Steve PrenticeSOUNDBITE_SPEAKER
The flaw is a critical authentication bypass vulnerability that lets attackers with HTTPS access execute arbitrary operating system commands by way of the TeamCity agent polling protocol.
Steve PrenticeSOUNDBITE_SPEAKER
The vulnerability was also added to the KEV catalog on August 5th.
Gerald AugerHOST
All right, sorry.
speaker_0NARRATOR
Top story number three.
speaker_0NARRATOR
CYSA warned that ransomware gangs are now exploiting a critical JetBrains TeamCity authentication bypass flaw patched in July adding it to its list of known exploited vulnerabilities after earlier confirming active attacks against federal networks.
speaker_0NARRATOR
The issue can let unauthenticated attackers run commands on affected servers, exposing build data, credentials and CICD pipelines.
speaker_0NARRATOR
With more than 160 Internet-exposed servers still unpatched, the warning highlights growing risk to software supply chains and enterprise development environments.
Jason EdwardsHOST
Bare Metal Cyber Magazine Weekly Roll-Up for the week ending September 25th, 2026.
Jason EdwardsHOST
This week's roll-up opens with ransomware crews exploiting TeamCity servers, putting trusted software build pipelines and downstream customers at risk.
Jason EdwardsHOST
It then turns to actively exploited edge and security systems that can hand attackers control over network access and policy.
Jason EdwardsHOST
A third major theme is scale.
Jason EdwardsHOST
Direct story links are collected at the bottom of the article.
Jason EdwardsHOST
Read on for the week's most consequential developments and practical next steps.
Jason EdwardsHOST
Next, software pipelines face ransomware through exploited TeamCity servers.
Jason EdwardsHOST
Ransomware crews are exploiting vulnerable TeamCity servers, putting software builds and downstream customers at risk.