RUSSIAN HACKERS ATTACK JETBRAINS’ TEAMCITY SERVERS

Summary from the TLDR InfoSec newsletter

Russian-backed hackers have been exploiting a critical vulnerability in JetBrains’ TeamCity servers since September, infiltrating the servers via authorization bypass and arbitrary code execution. The threat actor, CozyBear, has affected more than 30,000 JetBrains customers, compromising dozens of companies and more than a hundred devices in the United States, Europe, Asia, and Australia. JetBrains recommends updating on-premises servers to version 2023.05.4 or later to prevent exploitation.