Title: TrueConf Video Conferencing Platform Targeted in Zero-Day Malware Attack
Hackers have exploited a vulnerability in the TrueConf video conferencing platform, affecting over 100,000 organizations, including military and government entities. The flaw, identified as CVE-2026-3502, allows attackers to replace legitimate software updates with malicious files, compromising all connected systems.
The attacks, tracked by CheckPoint researchers as “TrueChaos,” have primarily targeted government agencies in Southeast Asia. Once a hacker gains control of the TrueConf server, they can distribute harmful software disguised as official updates, leading to potential data breaches.
To protect against this threat, organizations should immediately update their TrueConf software to version 8.5.3 or later. Monitoring for unusual network activity and verifying update sources are also vital steps.
Risk Level: High – Given the nature of the attack and the sensitivity of affected sectors, immediate action is crucial.
Source: View Original Report
