APT29
Security incidents tagged APT29. Newest first.
0 APT29 incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 1
- Live
- 0
- Patched
- 1
- Days without an incident
- 1130
- Longest quiet run: 1044 days (Dec 14–Oct 22)
Show 1 older incident1 older incident
September 2023 1
CriticalTeamCity On-Premises auth bypass to RCE, exploited by North Korea and Russia (CVE-2023-42793)Patched
JetBrains TeamCity On-Premises Patched
An authentication bypass in JetBrains TeamCity On-Premises gave unauthenticated attackers remote code execution on the CI server. Microsoft saw two North Korean groups exploit it, and US and allied agencies later said Russia's SVR (APT29) mass-exploited it. That's a direct path into build pipelines.
Open incident →CVE-2023-42793
