Hackers breach TrueConf to trojanize client installers with backdoors
Teaser from the source
The Head Mare hacktivist group has been exploiting vulnerabilities in unpatched TrueConf video conferencing servers to replace client installers with malicious versions that deliver backdoors. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on TrueConf
Other advisories
- CriticalCVE-2026-72530TrueConf Server: TrueConf Server Code Injection Vulnerability
- CriticalCVE-2026-72530trueconf_server: Code-Injection
- CriticalCVE-2026-72530trueconf_server: Code-Injection
- CriticalCVE-2026-72529TrueConf Server: fehlende Authentifizierung für kritische Funktion
- CriticalCVE-2026-72529TrueConf Server: fehlende Authentifizierung für kritische Funktion
- CriticalCVE-2026-3502Der TrueConf-Client lädt den Anwendungsaktualisierungscode herunter und wendet ihn an, ohne eine Überprüfung durchzuführen.
- CriticalCVE-2026-3502TrueConf Client enthält eine Schwachstelle beim Download von Code ohne Integritätsprüfung.
- HighCVE-2025-66824TrueConf Server: Cross-Site-Scripting (XSS)
Other news entries
- Homeland security cybercops say patch TrueConf (Russia's Zoom) if you're using itNewsThe Register — Security
- CISA orders feds to patch actively exploited TrueConf Server flawsNewsBleepingComputer
- CISA Urges Immediate Patching of Exploited TrueConf VulnerabilitiesNewsSecurityWeek
- KEV: Oracle, Zimbra, TrueConfVulnerabilitySANS NewsBites
- TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCoreNewsThe Hacker News
- TrueConf Vulnerability Added to KEV; Check Point Observed Exploits Starting in JanuaryVulnerabilitySANS NewsBites
ID