CISA says ransomware crews now exploit TeamCity CVE-2026-63077. Upgrade to 2025.11.7 or 2026.1.3, take the server off the Internet, and check for compromise.
Shared kernel, pre-auth, PoCs out. Role checks won’t save you....
No known exploit yet — that’s the window, not a reason to wait....
If auth sits in a Tomcat security constraint, an alternate endpoint name can skip it....
Attackers went from probing to writing PHP in under a day. Verify you’re on a fixed release....
In-the-wild V8 write; Chrome 153.0.8010.36/.37 fixes it. Federal KEV due is today — verify Edge and other Chromium browsers too....
Actively exploited CVSS 10 on on-prem VCO. Hosted patched; on-prem needs fixed builds and an IoC hunt....
Unauth data-plane RCE when a VIP has both APM and an OAuth profile. Hotfixes and interim iRule out; federal due…
CISA added two Check Point CVSS 9.8s to KEV yesterday. Federal due September 25 — patch gateways and management Jumbo…
Link-following Update Stack EoP to SYSTEM — federal due today. Verify September cumulatives actually landed....
Four more local-root bugs disclosed September 18 — different from Monday’s KEV trio. Confirm your kernel covers all four....
Two CVSS 9.8 unauth deserialization bugs on the ITSM brain. On-prem needs September updates or 2026.2+....
CISA added the GS1900 CGI stack overflow to KEV yesterday. Federal due September 24 — patch, lock management VLANs, triage....
