but it’s the perfect place to insert a supply chain backdoor. How many people audit their CI pipelines to ensure they aren’t compromised? Once they’re working, they get left alone. Noted security researcher The Grugq did not discount the possibility that CI/CD systems might be targeted by hackers as a vector for injecting malicious code. The development tool company is based in the Czech Republic and was set up by three Russian engineers. "If TeamCity has somehow been used in this process, it could very well be due to misconfiguration, and not a specific vulnerability," Shafirov said. However, Shafirov added that the TeamCity is a complex product that requires proper configuration. JetBrains chief executive and co-founder Maxim Shafirov denied his company is under investigation by United States authorities and that it played any role in the SolarWinds breach. In Australia, TeamCity is used by the likes of Nine Entertainment, Woodside Energy and Bankwest, among others. TeamCity is a continuous integration and deployment system for code, and JetBrains counts network monitoring company SolarWinds as a customer of the product, along with 79 Fortune 100 enterprises, and 300,000 developers around the world.
Jetbrains solarwinds software#
Developer tools maker JetBrains has refuted a story in The New York Times that suggested a vulnerability in its TeamCity software was recently exploited by hackers to deploy backdoors into SolarWinds' software and other applications.
0 kommentar(er)
