𝗔𝘂𝗴𝘂𝘀𝘁 𝟮𝟬𝟮𝟲: 𝗔𝗖𝗦𝗖 𝗔𝗹𝗲𝗿𝘁. 𝗧𝗲𝗮𝗺𝗖𝗶𝘁𝘆 𝗖𝗩𝗦𝗦 𝟵.𝟴. 𝗔𝗰𝘁𝗶𝘃𝗲𝗹𝘆 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝗲𝗱 𝗶𝗻 𝗔𝘂𝘀𝘁𝗿𝗮𝗹𝗶𝗮 𝗥𝗶𝗴𝗵𝘁 𝗡𝗼𝘄. Today ACSC issued an official alert. CVE-20...

𝗔𝘂𝗴𝘂𝘀𝘁 𝟮𝟬𝟮𝟲: 𝗔𝗖𝗦𝗖 𝗔𝗹𝗲𝗿𝘁. 𝗧𝗲𝗮𝗺𝗖𝗶𝘁𝘆 𝗖𝗩𝗦𝗦 𝟵.𝟴. 𝗔𝗰𝘁𝗶𝘃𝗲𝗹𝘆 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝗲𝗱 𝗶𝗻 𝗔𝘂𝘀𝘁𝗿𝗮𝗹𝗶𝗮 𝗥𝗶𝗴𝗵𝘁 𝗡𝗼𝘄. Today ACSC issued an official alert. CVE-2026-63077. TeamCity On-Premise. CVSS 9.8 out of 10. Actively exploited in Australia right now. Most people have never heard of TeamCity. But if your company has developers — TeamCity or a similar CI/CD server is almost certainly running somewhere in your infrastructure. Here is why this is critical. TeamCity is the heart of a software development process. Every line of code passes through it before reaching production. All build processes. All deployments. An attacker who gains access to TeamCity does not just get a server. They get the keys to everything your team has been building. Source code. Production credentials. Secrets stored in build variables. Access to cloud infrastructure. We have written about attacks on code repositories throughout 2026. LiteLLM and the supply chain attack on Meta. The GitHub agent that leaked private repositories. CrowdStrike's report on IP theft through supply chain. TeamCity is the next point in that same chain. For Australian software companies and development teams this is not an abstract threat. ACSC has confirmed active exploitation in Australia today.

At Aussie Cyber Guard we help Australian software companies identify vulnerabilities in their development infrastructure before attackers do. Contact us here or on LinkedIn. #CyberSecurity #Australia #TeamCity #ACSC #DevSecOps #SupplyChain #CyberRisk #AussieCyberGuard