Active exploitation of critical TeamCity bug underway

Numerous threat actors were reported by PRODAFT and GreyNoise to be targeting vulnerable JetBrains TeamCity continuous integration and deployment servers impacted by a critical authentication bypass flaw days after the bug was initially disclosed by Sonar security researchers, according to BleepingComputer.

authentication authentication bypass authentication bypass flaw bleepingcomputer bug bypass cloud security continuous continuous integration critical deployment exploitation flaw greynoise integration jetbrains jetbrains teamcity prodaft researchers security security researchers servers sonar targeting teamcity threat threat actors vulnerable