CISA: Ransomware gangs now exploiting critical TeamCity flaw
BleepingComputer reported on September 24, 2026 that CISA says ransomware gangs are now exploiting a critical flaw in TeamCity. The headline and excerpt frame the development as a shift to active exploitation by ransomware groups rather than a purely theoretical risk, with CISA as the attributing authority for that assessment. The provided source text does not include the CVE identifier for the TeamCity flaw, the specific TeamCity product versions affected, the names of the ransomware groups said to be exploiting it, or any technical detail about the exploitation method. It also does not describe CISA advisory identifiers, patch availability, or remediation guidance. Because those specifics are absent, the digest is limited to what the source states: a critical TeamCity vulnerability exists, and ransomware gangs are now exploiting it according to CISA.
Developers running TeamCity should note that CISA says ransomware gangs are now exploiting a critical flaw in the product, per BleepingComputer.