Back Securityaffairs.Co

U.S. CISA adds TrueConf Server flaws to its Known Exploited Vulnerabilities catalog

Securityaffairs.Co •Pierluigi Paganini • August 21, 2026

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds TrueConf Server flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: TrueConf Server is an on-premises video conferencing and unified communications platform developed by TrueConf. Organizations can deploy it on their […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Head Mare Hackers Exploit TrueConf Vulnerabilities to Deploy Backdoors The Head Mare hacktivist group has breached TrueConf video conferencing servers, exploiting vulnerabilities to replace legitimate client installers with malicious versions containing backdoors. The attackers executed arbitrary code with high privileges using two vulnerabilities tracked as KLCERT-26-057 and KLCERT-26-058, allowing them to deploy the PhantomCore and PhantomGraph backdoors. TrueConf, a tool widely used in Russia's enterprise and government sectors, is now compromised, affecting organizations even if they do not directly use the service. Kaspersky discovered the attack in July 2026, and the threat actor is actively targeting various sectors, including energy and IT. The vulnerabilities affect multiple versions of TrueConf Server, and patches have been released to mitigate the risks. 13 sources 79

U.S. CISA adds TrueConf Server flaws to its Known Exploited Vulnerabilities catalog

The full story

Extracted Entities

Companies (2)

Platforms (1)