CISA: Ransomware gangs now exploiting critical TeamCity flaw

By Sergiu Gatlan

AI Summary

CISA issued a warning that ransomware gangs are actively exploiting a critical JetBrains TeamCity vulnerability that was patched in July 2026, adding it to the Known Exploited Vulnerabilities catalog and mandating remediation by federal agencies. TeamCity's widespread use in CI/CD pipelines makes this a high-impact supply chain risk vector. Organizations running self-hosted TeamCity instances should prioritize patching immediately.

Read full article → https://www.bleepingcomputer.com/news/security/cis…

Relevance score: 84.0/100

# More from September 25

1
There's a new way to break RSA that's faster than anything we've seen before Ars Technica Security
2
Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure The Hacker News
3
OpenAI hacked Australian Medicare govt site, probed data providers BleepingComputer
5
Digital forensics firm with US federal contracts covered up ties to Russia, DOJ alleges The Record
6
Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content The Hacker News
7
Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry The Hacker News
8
A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You The Hacker News
9
Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer The Hacker News
10
Lawmakers introduce bill for voluntary telecom cyber rules after Salt Typhoon hacks The Record