TrueConf

Reported Context (4)

A high-severity bug (CVE-2026-3502) in the TrueConf video conferencing tool is being actively exploited, prompting CISA to order federal agencies to patch within two weeks. CISA Gives Agencies Two Weeks to Patch Exploited TrueConf Vulnerability
Chinese hackers have exploited a zero-day vulnerability in the TrueConf video conferencing software in attacks against government entities in Asia, Check Point reports. Check Point Says TrueConf Zero-Day Was Used in Asian Government Attacks
Attackers exploited a zero-day in TrueConf’s update mechanism (CVE-2026-3502) to replace legitimate updates with malicious executables and distribute them to all connected endpoints. TrueConf Zero-Day Exploited to Push Malicious Updates to Connected Clients
Check Point Research discovered a zero-day in the TrueConf client (CVE-2026-3502, CVSS 7.8) that allows an attacker controlling an onâpremises TrueConf server to distribute and execute arbitrary files to connected TrueConf Zero-Day Exploited in Southeast Asian Government Campaign

CVE (1)

Malware (2)

Threat Actors (1)

MITRE ATT&CK (13)

Vendors (3)

Tools (1)

Industries (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.