Critical

Australia Warns of Active Exploitation of Critical TeamCity Server Flaw

Infosecurity Magazine

August 25, 2026 at 11:00 AM

Actively Exploited

Overview

Australian officials are warning TeamCity users to address a critical vulnerability that is currently being exploited by attackers. This alert follows a similar warning from the US government, indicating that the flaw poses a significant risk to organizations using TeamCity. The vulnerability could allow unauthorized access or control over affected systems, making it crucial for users to take immediate action. By patching their servers, companies can protect themselves from potential breaches and data loss. With active exploitation confirmed, the urgency for a fix is clear, and organizations should prioritize this update to safeguard their operations.

Key Takeaways

Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
Affected Systems: TeamCity server software, all versions prior to the latest patch.
Action Required: Users should apply the latest security patches provided by JetBrains for TeamCity.
Timeline: Newly disclosed

Original Article Summary

Australian officials are urging TeamCity customers to patch an actively exploited critical flaw, which follows a similar warning from the US government

Impact

TeamCity server software, all versions prior to the latest patch.

Exploitation Status

This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.

Timeline

Newly disclosed

Remediation

Users should apply the latest security patches provided by JetBrains for TeamCity. Specific patch numbers or versions were not mentioned, so it's advisable to check the official TeamCity website for the most recent updates.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Vulnerability, Patch, Update, and 1 more.

Read Original Article

Related Coverage

Interpol targets Black Axe’s illicit financial web in latest international sting

CyberScoop

Interpol has launched a major international operation targeting the financial networks of the Black Axe criminal organization, which is involved in various illicit activities across multiple continents. This coordinated sting involved several countries and resulted in the seizure of millions of dollars in assets. Authorities also uncovered infrastructure that supports 'Crime-as-a-Service', indicating a sophisticated level of organization within Black Axe. This operation not only disrupts their financial operations but also highlights the ongoing global efforts to combat cybercrime. The implications of this sting are significant as it aims to dismantle a key player in the world of cybercrime, potentially reducing the threats posed to individuals and businesses worldwide.

Aug 25, 2026

From Fake Workers to Account Recovery: The Growing Identity Verification Risk

BleepingComputer

Attackers are shifting their focus from directly compromising login credentials to exploiting identity verification processes. This change in tactics poses significant risks, allowing bad actors to create fake identities or manipulate recovery procedures to gain unauthorized access. Organizations that rely on weak verification methods are particularly vulnerable to social engineering attacks, which can lead to data breaches and loss of sensitive information. Strengthening identity verification processes is essential to mitigate these risks and protect both employees and customers. Companies must adopt more robust methods to ensure that only legitimate users can access their systems, thereby reducing the chances of fraudulent activities.

Aug 25, 2026

INTERPOL crackdown on West African crime rings uncovers troubling new trend

Help Net Security

INTERPOL recently conducted an extensive operation called Jackal IV, targeting organized crime groups in West Africa. Over eight months, police in 22 countries arrested 58 individuals and identified 263 suspects linked to groups like Black Axe, known for their involvement in money laundering and other illicit activities. The operation aimed to disrupt these crime networks by seizing assets and facilitating arrests. This crackdown reveals a troubling trend of increasing organized crime activity in the region, which poses significant challenges for law enforcement and raises concerns about the broader impact on security and governance in West Africa. The collaboration across multiple countries underscores the need for a united front against such transnational crime.

Aug 25, 2026

WhatsApp adds stronger two-step verification, multiple passkeys

BleepingComputer

WhatsApp is enhancing its account security with the introduction of multiple passkeys and a more robust two-step verification process. These features aim to provide users with better protection against unauthorized access to their accounts. The update is part of WhatsApp's ongoing efforts to improve security, especially as the platform continues to grow in popularity. Users will benefit from these added layers of security, making it harder for attackers to compromise their accounts. This move is particularly important given the increasing number of phishing attempts and account takeovers targeting messaging apps.

Aug 25, 2026

Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode

The Hacker News

Marimo has fixed a serious security flaw in its notebook software that could allow attackers to run unauthorized commands. This vulnerability, identified by VulnCheck's CVE Numbering Authority, enables an attacker to execute Model Context Protocol (MCP) commands when a specially crafted notebook is opened in edit mode. If exploited, this could lead to unauthorized actions on a user's system, particularly affecting individuals using the notebook software in environments where sensitive data is handled. Users are urged to update their software promptly to mitigate potential risks associated with this flaw.

Aug 25, 2026

Check Point Threat Brief: Critical Infrastructure Breaches and Emerging AI Attack Surfaces

Cyber Defense Magazine

Check Point Research recently reported on a series of significant security breaches affecting critical infrastructure and the emergence of new AI-related attack methods. These breaches pose serious risks to various sectors, highlighting vulnerabilities that attackers may exploit. The report, released on August 24, emphasizes the need for organizations to bolster their defenses against these evolving threats. As cybercriminals continue to adapt their strategies, it is crucial for companies to stay informed and proactive in their cybersecurity measures. This situation underscores the importance of vigilance in protecting sensitive systems and data from increasingly sophisticated attacks.

Aug 25, 2026