Jetbrains - GoKawiil

CISA says ransomware groups now exploit JetBrains TeamCity flaw CVE-2026-63077

CISA updated its Known Exploited Vulnerabilities catalog to flag CVE-2026-63077, a critical TeamCity authentication bypass patched by JetBrains on July 25, as now being abused in ransomware attacks. JetBrains had already confirmed in-the-wild exploitation on August 7, and CISA had ordered federal agencies on August 5 to secure their systems within three days. Shadowserver currently tracks roughly 160 unpatched TeamCity servers still exposed to the flaw.

bleepingcomputer.com · 2026-09-24

Benchmark tests find RTK's token-saving claims don't hold up on cost

RTK, a popular tool with over 79,000 GitHub stars that compresses terminal output before AI coding agents read it, has been marketed as a way to cut AI coding costs, with one viral post claiming up to 60% token savings. But independent benchmark testing using Terminal-Bench 2.1 across 1,740 task attempts found mixed results: costs dropped 5% for one model setup but rose 5% for another, contradicting the widely shared savings figures.

quesma.com · 2026-09-11