Russian hackers target unpatched JetBrains TeamCity servers

Russian state-sponsored hackers have been exploiting CVE-2023-42793 to target unpatched, internet-facing JetBrains TeamCity servers since September 2023, US, UK and Polish cybersecurity and law enforcement authorities have warned. The targets APT 29 (aka CozyBear, aka Midnight Blizzard), believed to be associated with the Russian Foreign Intelligence Service (SVR), has been active since 2013. The group is known for targeting a wide variety of organizations: government agencies, think tanks, political organizations, diplomatic agencies, biomedical and energy … More →

The post …

apt apt 29 blizzard cisa cve cyber espionage cybersecurity don't miss enforcement enterprise exploit exploiting facing foreign intelligence fortinet hackers hot stuff intelligence intelligence service internet jetbrains jetbrains teamcity law law enforcement midnight midnight blizzard national cyber security centre polish russian russian hackers september servers service shadowserver sponsored state svr target teamcity unpatched vulnerability