Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

JetBrains is advising Cadence users to revoke and rotate their credentials due to a security incident. The incident occurred when attackers exploited a critical vulnerability in TeamCity, gaining access to JetBrains' environment. As a result, users are being told to immediately revoke or rotate all credentials and secrets that may have been used for Cadence executions. This action is necessary because the attackers were able to extract AWS credentials during the breach. JetBrains is taking this step to protect its users after the security incident last month. The company is urging users to take immediate action to secure their credentials.