Axon Rapid Response - SVR Exploiting TeamCity CISA AA23-347A
Incident Report for Rapid Response Status Page
Resolved
This incident has been resolved.
Posted Dec 14, 2023 - 17:00 UTC
Identified
Following alert AA23-347A published by CISA, Team Axon has initiated a Rapid Response effort and investigated activities in Axon customers’ environments regarding the identification and disruption of the Russian Foreign Intelligence Service (SVR) group.

CISA Alert: https://www.cisa.gov//news-events/cybersecurity-advisories/aa23-347a

As part of the Rapid Response efforts, the team conducted an IOC sweep over Axon customers’ environments based on the IOCs as provided in CISA's alert, and time range of the last 90 days.

For any customers identified as impacted, an Axon report containing pertinent details has been made available. Customers with findings in their environments can access these reports on the Hunters platform, specifically on the "Axon Reports" page.


As always, feel free to reach out for any assistance and further questions.
Posted Dec 14, 2023 - 17:00 UTC
This incident affected: Rapid Response.
← Current Status Powered by Atlassian Statuspage