CISA: Russian Threat Actors Exploiting TeamCity Flaw

Since late September, Russian threat actors have been exploiting a known vulnerability in TeamCity, a continuous integration and continuous deployment tool from software development company JetBrains, in order to escalate privileges, deploy malware and establish persistent access in compromised environments.

JetBrains released patches to fix the flaw (CVE-2023-42793) on Sept. 18, and said that on-premises instances of the TeamCity CI/CD server are impacted. TeamCity is a tool that helps automate the processes for building, testing and deploying software applications, and …

access cisa compromised continuous continuous integration cve deploy deploy malware deployment development environments exploiting fix flaw from software integration jetbrains known vulnerability malware order patches persistent privileges russian september software software development software development company teamcity threat threat actors tool vulnerability