Unpatched TeamCity Strikes JetBrains

JetBrains got Cadence breached via an unpatched TeamCity flaw, coughing up AWS credentials. Naturally, rotating all your keys is now your weekend homework.

Source: The Hacker News

The Full Story

Severity: High Mood: Frustrating

Just another Tuesday in IT, where JetBrains leaves TeamCity unpatched and Cadence users pay the price with stolen AWS credentials. It is always heartwarming when a critical flaw sits around long enough for intruders to waltz in and plunder keys. Keeping ourselves from suffering this exact circus means dropping everything to revoke and rotate Cadence credentials immediately while desperately applying TeamCity patches. Why do we even bother running build servers if basic hygiene is completely optional?

#Unpatched #TeamCityFail

Open article →