Back Feeds2.Feedburner

TrueConf zero

Feeds2.Feedburner •Sinisa Markovic • April 2, 2026

Suspected China-nexus attackers have leveraged a zero-day vulnerability (CVE-2026-3502) in the TrueConf client application to distribute malware within government networks in Southeast Asia, Check Point researchers discovered. Malicious client update attack chain (Source: Check Point) Trusted update mechanism turned into attack vector TrueConf is a videoconferencing platform designed to run on private local networks (LANs) without internet access, which makes it attractive to government departments, defense institutions, and critical infrastructure operators. Consequently, the solution is … More →

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Operation TrueChaos: Exploitation of TrueConf Zero-Day Vulnerability In early 2026, a series of targeted attacks named Operation TrueChaos exploited a zero-day vulnerability in TrueConf software, tracked as CVE-2026-3502, which allows attackers to execute arbitrary files on connected endpoints. The flaw, stemming from a missing integrity check in the update mechanism, affects TrueConf versions 8.1.0 through 8.5.2. Government entities in Southeast Asia were primarily targeted, with attackers gaining control of on-premises TrueConf servers to distribute malicious updates. The campaign is attributed to a Chinese-nexus threat actor based on observed tactics and infrastructure. Following the report, a patch was released in March 2026. The attack method involved replacing legitimate updates with malicious files, impacting multiple agencies. The incident highlights significant risks for organizations using TrueConf in sensitive environments. 5 sources 78

Extracted Entities

TrueConf zero

The full story

Extracted Entities

Attack Types (2)

Companies (1)

CVEs (1)

Industries (1)

MITRE ATT&CK (2)