jetbrains

JetBrains fixed CVE-2026-63077, a 9.8-severity flaw letting unauthenticated attackers run OS commands on TeamCity servers via the agent polling protocol.

JetBrains disclosed six vulnerabilities across IntelliJ IDEA, TeamCity, and YouTrack on July 16, led by a critical 9.8 CVSS path-traversal flaw in IntelliJ IDEA.

JetBrains patched three critical Hub and YouTrack flaws enabling account takeover and authentication bypass, alongside code-execution fixes across IntelliJ, GoLand, and TeamCity.

A coordinated campaign published 15 fake AI coding assistants on the JetBrains Marketplace that harvested developer API keys; JetBrains removed them and terminated 7 publisher accounts.

JetBrains released Kotlin 2.4.0 on June 4, promoting context parameters and explicit backing fields to Stable, dropping the K1 compiler, and adding Swift package dependencies for Multiplatform.

JetBrains unveiled an official Kotlin extension for VS Code in alpha, previewed Kotlin 2.4-RC feature stabilizations, and published research showing Kotlin development cycles are 15–20% shorter than Java.

Kotlin 2.3.20 ships name-based destructuring, default Build Tools API on Kotlin/JVM, Gradle 9.3.0 compatibility, and Wasm string performance gains of up to 4.6 times.

JetBrains launches Central, a governance and execution platform for AI coding agents, alongside IntelliJ IDEA 2026.1 with Agent Client Protocol support and the Air agentic IDE in public preview, signaling a decisive pivot toward agent-driven development.

JetBrains previews Air, a new environment that manages multiple AI coding agents concurrently, alongside a standalone Junie CLI agent in beta.