Russian SVR-Linked APT29 Targets JetBrains TeamCity Servers in Ongoing Attacks

Threat actors affiliated with the Russian Foreign Intelligence Service (SVR) have targeted unpatched JetBrains TeamCity servers in widespread attacks since September 2023.
The activity has been tied to a nation-state group known as APT29, which is also tracked as BlueBravo, Cloaked Ursa, Cozy Bear, Midnight Blizzard (formerly Nobelium), and The Dukes. It's notable for the supply chain

apt29 attacks bear blizzard bluebravo cloaked cloaked ursa cozy bear foreign intelligence intelligence intelligence service jetbrains jetbrains teamcity midnight midnight blizzard nation nobelium russian september servers service state svr teamcity threat threat actors unpatched