Russian SVR-Linked APT29 Targets JetBrains TeamCity Servers in Ongoing Attacks

🗓️ 14 Dec 2023 10:32:00Reported by The Hacker NewsType

Russian SVR-Linked APT29 Targets JetBrains TeamCity Servers in Ongoing Attacks. APT29 exploits TeamCity CVE-2023-42793, compromised servers lead to source code access and supply chain operations. EDRSandBlast evasion, GraphicalProton deployment via OneDrive C2

Reporter	Title	Published	Views	Family All 79
zdt	JetBrains TeamCity Unauthenticated Remote Code Execution Exploit	2 Oct 202300:00	–	zdt
zdt	JetBrains TeamCity 2023.05.3 - Remote Code Execution Exploit	14 Mar 202400:00	–	zdt
GithubExploit	Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity	24 Apr 202416:33	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity	7 Jan 202422:29	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity	20 Sep 202412:15	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity	21 Apr 202413:52	–	githubexploit
GithubExploit	CVE-CICD-Security	13 Aug 202611:38	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity	21 Apr 202413:52	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity	5 Jul 202417:39	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity	24 Aug 202417:17	–	githubexploit

15 Dec 2023 07:02Current

10Critical risk

Vulners AI Score10

CVSS 3.19.8

EPSS0.99979