Attackers exploited CVE-2026-63077 (CVSS 9.8) to break into Cadence, JetBrains’ cloud GPU service, between August 8 and 24, 2026, exfiltrating AWS IAM credentials and data held in S3 buckets. Revoke and rotate every credential and secret tied to Cadence without delay.

On August 24, 2026, JetBrains shipped Junie Local, a free version of its coding agent that runs entirely on the machine, using a 4-bit Qwen3.6-27B model. The entry cost is steep — macOS 26, an M5 chip, and 64 GB of unified memory — but it is the first local agent with no assembly required.

JetBrains disclosed CVE-2026-63077 on July 27, 2026 — a CVSS 9.8 unauthenticated remote code execution flaw affecting every on-premises TeamCity instance. No active exploitation has been detected yet, but the clock is ticking: TeamCity's history with state-sponsored attackers makes this a drop-everything patch scenario.