CISA: Ransomware Gangs Exploit TeamCity Flaw

CISA warned federal agencies on Wednesday that ransomware gangs are exploiting CVE-2026-63077, a critical TeamCity authentication bypass patched July 25. The flaw lets unauthenticated attackers run OS commands, risking credentials and CI/CD pipelines. CISA added it to its exploited-vulnerabilities catalog on August 5, ordering agencies to secure networks within three days. Shadowserver tracks about 160 unpatched servers, down from 700.