Multiple North Korean threat actors exploiting the TeamCity CVE-2023-42793 vulnerability
released on 2023-11-14 @ 09:43:12 AM
Since early October 2023, researchers observed two North Korean nation-state threat actors – Diamond Sleet and Onyx Sleet – exploiting CVE-2023-42793, a remote-code execution vulnerability affecting multiple versions of JetBrains TeamCity server. TeamCity is a continuous integration/continuous deployment (CI/CD) application used by organizations for DevOps and other software development activities.