RSS Feeds

JetBrains is responding to the industry-wide eMudhra Certificate Authority (CA) security incident, which affects certificate trust in a number of software products and development environments, including several JetBrains products. Our Security and product teams are working to address the impact and release security updates. We recommend that customers keep their JetBrains products, operating systems, and development environments up to date and follow the guidance below.

What Happened

On October 17, 2026, a security researcher reported that private keys associated with eight eMudhra intermediate certificate authorities could be recovered because of weaknesses in how they were generated. 

These weaknesses could allow an attacker to create certificates that appear trusted by systems that continue to accept the affected certificate chains.

Browser and operating system vendors have taken steps to block the affected certificates. However, applications that use separate or bundled certificate trust stores may require additional updates.

JetBrains Impact

Our Security and product teams have been assessing the impact across the JetBrains product portfolio. We have identified that this incident affects multiple products, including our IDEs, Toolbox App, TeamCity, YouTrack, Hub, and other developer tools.

We are not aware of any exploitation of this issue against JetBrains customers.

Many JetBrains products, both desktop and on-premises as well as our cloud services, run on Java, including our IDEs, which use JetBrains Runtime (our build of the Java runtime). JetBrains Runtime, like other Java runtimes such as Oracle JDK, OpenJDK, and Amazon Corretto, trusted the affected certificates.

We are prioritizing remediation based on severity and potential customer impact and releasing updates as fixes become available.

Security Updates and Infrastructure Status

November 2, 2026 update: MPS released the fix

November 3, 2026 update: TeamCity released the fix

We are working on security updates for all affected distributable JetBrains products and tools. The table below shows which updates are already available and which are still in progress.

For JetBrains cloud services, we are updating our cloud services and infrastructure on an ongoing basis, including JetBrains Air, Qodana Cloud, TeamCity Cloud, YouTrack Cloud, Datalore and JetBrains AI services. For these services, no action is required from customers. One exception: TeamCity Cloud customers who use self-hosted build agents should check the Java runtime on those agents and update it if needed.

Our teams are continuing remediation work across other affected products. We will update this post with product-specific guidance as fixes become available.

What Customers Should Do

We recommend that customers take the following steps:

Install available JetBrains security updates. Update affected products to the latest patched versions as they become available.

Keep operating systems and runtimes updated. Apply the latest security updates from operating system and runtime vendors, including certificate trust store updates. For additional technical guidance, see the eMudhra incident recommendations for developers.

Follow product-specific guidance. For products where security updates are not yet available, follow the recommended mitigation steps provided in JetBrains security advisories and product documentation.

If you cannot update the product right now, update the Java runtime it uses. If that is not possible either, remove the two root certificates at the top of all affected chains, emSign ECC Root CA – G3 and AAA Certificate Services, from that Java runtime’s trust store, or point the product to a copy of the trust store without them. Also update your OS ca-certificates package, since many tools trust the system certificate store too.

Disabling certificate validation altogether or otherwise weakening the certificate verification mechanisms as a workaround is NOT recommended.

What’s Next

Our security and product teams are continuing to review certificate trust across affected JetBrains products and preparing additional security updates where needed.

We will update this post as fixes become available and publish version-specific guidance through our product release notes and security advisories.

Working on a remote machine should feel just like working on a local project: open it, start coding, and pick up where you left off. In 2026.3, JetBrains IDEs move closer to that goal. You can now start and manage remote sessions directly inside the IDE, connect over SSH using native OpenSSH, and begin working on a remote project while the full remote IDE is still being prepared.

Remote development sessions are now part of your IDE

You no longer need to open JetBrains Gateway or use the Toolbox App as a separate starting point for remote development. From the Home screen, your recent remote projects now appear alongside your local ones – marked with a “terminal” icon so they are easy to spot.

First-time connections to a remote host can be initiated from the top menu, under File | Connect to Remote, or from the Home screen. The Connect to Remote option in the Projects widget starts a simple two-step dialog:

After connecting to a remote host, you can either open a specific project residing on a remote machine or launch the IDE right away.

If this is your first time connecting, the remote backend will be installed automatically, or updated to a new version if needed.

You will be guided through this setup, getting you into your code faster than before. While the existing remote backend model remains unchanged, the entire connection and session management experience now lives inside the IDE.

The new in-IDE workflow also includes a few practical path-handling features: paths beginning with ~ are now correctly interpreted as remote home directories in both the full connection flow and Light Mode. Together, these updates make it easier to select project directories using familiar syntax without accidentally resolving paths against your local machine.

Note: This initial implementation focuses on SSH connections to supported remote environments.

Our goal was simple: make your IDE the single place where you start, manage, reconnect, and return to remote projects – no additional tools or applications required. Your daily remote development workflow is now available in one click: Just open your remote project from the Recent Projects list, and you are good to go.

Connect with the SSH setup you already use

SSH is fundamental to many JetBrains IDE workflows, including remote development, terminal access, and remote host integrations. In v2026.3, JetBrains IDEs introduce native OpenSSH support as an option for SSH connections.

This update eliminates the need to rely exclusively on a custom JetBrains SSH implementation. Instead, you can take advantage of the compatibility, ecosystem, and maintenance of OpenSSH. Building on a broadly adopted and actively maintained ecosystem means we no longer need to independently implement, patch, and track every single SSH compatibility and security concern within the IDE.

Additionally, the new in-IDE Remote Development picker brings together connections from your recent history, Toolbox, OpenSSH, and IDE settings, making it easier to reuse existing SSH setups and connect quickly.

Native OpenSSH support extends the range of authentication mechanisms and SSH features available to JetBrains IDE users. As this integration matures, OpenSSH will become the default SSH implementation in upcoming releases.

Start working while the remote IDE gets ready

Starting a remote project usually involves a waiting period while the remote IDE is downloaded, installed, and launched. In v2026.3, we are cutting down this downtime: When you connect to a remote project using the new in-IDE flow, the IDE immediately launches an embedded client and starts the session in Light Mode while the remote IDE is downloading, installing, and launching.

Light Mode gives you instant access to the project and provides the essential tools you need right away. You can explore the remote project, open and edit files, use the terminal, and search through files and their content. The IDE remains responsive from the moment the connection is established, giving you useful access to your workspace.

Light Mode intentionally focuses on the basics. Once the remote IDE is ready, your IDE will transition seamlessly from Light Mode to Smart Mode. All work started in Light Mode will be preserved. You can continue working without closing the project, repeating actions, or restarting your workflow manually.

In this release, Light Mode is supported exclusively on Linux remote hosts in GoLand, IntelliJ IDEA, PhpStorm, PyCharm, RubyMine, RustRover, and WebStorm. CLion and Rider are not yet supported.

IntelliJ IDEA 2026.2.4 is now available! You can update to this version from inside the IDE, using the Toolbox App, or using snaps if you are a Ubuntu user. You can also download it from our website.

The latest update brings the following improvements:

• Files and directories in WSL projects no longer incorrectly appear as deleted or missing when file system prefetching fails. [IJPL-252022]
• The Java onboarding tour now ensures smooth progression through its lessons. [IJPL-250871]
• Import optimization now works as expected without affecting IDE responsiveness during code formatting, saving, or committing changes. [IJPL-249060]
• The IDE starts up reliably even if the plugin cache file contains invalid data. [IJPL-250688]

For a comprehensive overview of the fixes, see the release notes. If you spot any issues, let us know via the issue tracker.

Happy developing!

Across the country, there are reports of heightened ICE activity. Advocates worry about how close it is to midterms, but so far voter turnout is surging.

(Image credit: Charly Triballeau)

Eljay Crisp-Carr, 20, spent five months behind bars before prosecutors asked to dismiss charges

Ohio prosecutors on Friday dropped charges against a man arrested in connection with the 6 June shooting at Toledo’s Old West End festival that injured 12 people.

Eljay Crisp-Carr, 20, had faced more than 50 felony charges stemming from the shooting, including 25 counts of attempted murder. He was released after spending about five months behind bars.

Cryptocurrency theft is estimated to generate half of the country’s foreign currency income

North Korea plays by its own rules. The isolated, secretive and autocratic country is largely cut off from the world’s economic system – but when it comes to generating foreign earnings it relies on some of the world’s most sophisticated hacking.

Experts, such as TRM Labs, quickly attributed the extraordinary $6.3bn (£4.7bn) Binance cryptocurrency theft to TraderTraitor, an elite North Korean hacking unit that has also been known as the Lazarus Group. Though the link may not be proven yet, the pattern of behaviour is familiar.

На моём сайте уже были инструменты для работы с текстом, но с книгами получалась нелепая история. FB2 приходилось открывать в одной программе, DjVu -в другой, а если из книги нужен был не просто отрывок для чтения, а нормальный редактируемый текст, начиналась ручная сборка. Хотелось открыть файл прямо в браузере, видеть главы слева и не искать каждый раз, куда у конкретной программы спрятаны сноски. Сначала я добавил FB2. Потом выяснилось, что слово «читалка» скрывает несколько разных задач: прочитать XML, не сломать структуру книги, показать её удобно, выгрузить в другие форматы. Следом появился DjVu, у которого вместо XML --страницы с изображением и иногда текстовым слоем. А из желания превратить этот текстовый слой обратно в книгу выросла отдельная очередь задач. Расскажу, как всё это устроено и где я успел наступить на грабли.

The selection’s excellent second in the Arc de Triomphe is the best form on offer among the European challengers

The Turf is the highlight of Saturday’s nine-race Breeders’ Cup card for European fans, with 10 of the 14-strong field trained in the UK, Ireland or France, and Bay City Roller (21.36) could be an excellent bet at around 9-1 with British bookmakers to give George Scott a first Breeders’ Cup winner at the second attempt.

Stall 13 is not ideal, but there is little obvious pace on his inside and Oisin Murphy managed to get close to the lead from a similar draw in the Arc. A strong second behind Daryz at Longchamp showed that Bay City Roller can act on a sound surface, and he is the top-rated runner in the field on Timeform’s ratings on that form.

Я хотел заметочник, где заметки — обычные .md-файлы в обычной папке, есть [[ссылки]] с обратными ссылками и поиск, а текст сразу выглядит оформленным, без отдельной панели предпросмотра. И чтобы он запускался быстро, не тащил в память целый браузер и не требовал аккаунта. Готовые варианты почти все построены на WebView или Electron. Я написал свой: Leaflet, C# и Avalonia, без единой веб-страницы внутри. Расскажу, как он устроен и где пришлось повозиться.

Humanitarian convoy brings food and medicine to Russian-held city where people have suffered severe shortages

People living in the besieged Russian-held city of Oleshky in southern Ukraine were evacuated on Friday as part of a joint relief operation, the first of its kind in four years and eight months of war.

The city, which lies on the Russian-occupied side of the Dnipro River, opposite Kherson, has suffered months of serious food and medical shortages, leading to warnings of starvation for the few thousand people remaining there, including about 50 children.

Humanitarian convoy brings food and medicine to Russian-held city where people have suffered severe shortages

People living in the besieged Russian-held city of Oleshky in southern Ukraine were evacuated on Friday as part of a joint relief operation, the first of its kind in four years and eight months of war.

The city, which lies on the Russian-occupied side of the Dnipro River, opposite Kherson, has suffered months of serious food and medical shortages, leading to warnings of starvation for the few thousand people remaining there, including about 50 children.

• Ryan Rickelton and Wiaan Mulder hit hundreds for hosts

• Australia face last-day chase to clinch Test and the series

It would be unfair to say that Australia let a winning position slip on the fourth day of the third Test at Cape Town, only because that would undersell how Ryan Rickelton and Wiaan Mulder prised it away. Australia’s vaunted four bowlers, owners of 1,674 wickets at day’s beginning, could only raise that to 1,678 by day’s end. In the process, a lead of 40 became 287. South Africa had been 40 for four in the first innings at Gqeberha and bounced back to win; they were effectively 40 for four in the third innings here, and now have a great chance to do the same.

The unlikely basis was Rickelton, a franchise circuiteer who spends most of his year smiting runs or keeping wicket in 20-over blocks. In this series he was monstered in Durban by Josh Hazlewood, out for none and two while pinch-hitting as an opener, then made scant impression down the order with 31 in Gqeberha. He looked like a modern cricketer become anachronism in this ancient form.

From surgeons to senior civil servants, even the most decent people can make disastrous mistakes. But these gaffes require honesty

Gabriel Weston made a mistake at work this summer. It doesn’t define her – she was and is a well-regarded NHS surgeon and author – but it was serious enough, as she explained in an extraordinarily candid series of Instagram and Substack posts this month, to prompt an investigation that left her feeling “ashamed and alone and really quite nervous”. Whatever went wrong in the operating theatre was bad enough to be classed a “never event” (something that should never be able to happen if the process is working properly) and triggered a nagging anxiety that she might somehow do it again, unless she figured out where she had unexpectedly gone wrong.

It’s a fascinating insight into a process that most people never have the courage to talk about openly. But it also highlights why it’s so hard in practice for doctors and other professionals to acknowledge and learn from mistakes – as every public inquiry into every public scandal ends up recommending, only to repeat it all over again after the next one – rather than close ranks and cover up. Weston says she only spoke up out of frustration with what she saw as her employers’ failure to support her (she had asked to reduce what she considered an overloaded operating list to take some pressure off, which she says has now happened, leaving her full of praise for the hospital’s ultimate response). Judging by the responses to her posts, she’s not alone.

Gaby Hinsliff is a Guardian columnist

In the UK and Ireland, Samaritans can be contacted on freephone 116 123. In the US, you can call or text the 988 Suicide & Crisis Lifeline at 988 or chat at 988lifeline.org. In Australia, the crisis support service Lifeline is 13 11 14. Other international helplines can be found at befrienders.org

Я собираю файл конфигурации из XML так, чтобы он совпал с платформенным с точностью до бита. Диаграммы Ганта в типовых конфигурациях пустые, и на них ушло шесть дней. Внутри нашлись обычная диаграмма, воображаемый холст 480 на 360, число, у которого платформа теряет последний бит, и палитра, где серия номер -1 получает 15-й цвет. Рассказываю, как это устроено и как добывалось: дизассемблер, Frida и серия загрузок платформой.