CISA Orders Feds to Patch Actively Exploited TrueConf Server Flaws

Homeland security cybercops say patch TrueConf (Russia's Zoom) if you're using it

Ukrainian hacktivists exploiting the bugs, but TrueConf's reach stretches well beyond home turf

CISA orders feds to patch actively exploited TrueConf Server flaws

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered U.S. federal agencies to prioritize patching two actively exploited vulnerabilities in the TrueConf Server self-hosted communications platform.

CISA Urges Immediate Patching of Exploited TrueConf Vulnerabilities

The Head Mare hacktivist group has been exploiting the bugs to deploy the PhantomCore malware. The post CISA Urges Immediate Patching of Exploited TrueConf Vulnerabilities appeared first on SecurityWeek.

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Adds Two Known Exploited Vulnerabilities to Catalog awallace Aug 20, 2026 Release DateAugust 20, 2026 DescriptionCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.  CVE-2026-72529 TrueConf Server Missing Authentication for Critical Function Vulnerability  CVE-2026-72530 TrueConf Server Code Injection VulnerabilityThese types of vulnerabilities are a freque…