Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

Unidentified threat actors compromised JetBrains' hosted service, Cadence, by exploiting the critical TeamCity vulnerability CVE-2026-63077 between August 8 and 24, 2026. This active exploitation allowed attackers to extract multiple AWS IAM credentials from a server backup and access sensitive user data, including personal information and project source code. JetBrains is urgently advising all Cadence users to revoke and rotate their credentials, as well as invalidating all plugin access tokens to mitigate the risk of further unauthorized access.