// AWSHIGH
Between August 8 and August 24, 2026, attackers exploited CVE-2026-63077, a critical unauthenticated remote code execution vulnerability in JetBrains TeamCity, to breach JetBrains Cadence cloud compute service. The attackers extracted AWS IAM credentials from JetBrains AWS accounts, source code, configuration files, and secrets stored in backups and S3 buckets. The vulnerability (CVSS 9.8) affects all TeamCity On-Premises versions prior to 2025.11.7 or 2026.1.3 and was publicly disclosed August 5, 2026.
- JetBrains Cadence Breach: Attackers Exploit Unpatched TeamCity C(opens in a new tab)
- Daily Drop (1356)(opens in a new tab)
// Get alerts for AWS