John Z Black

A Zero-Day Turned TrueConf's Update Channel Into a Malware Delivery System

John Z Black Apr 3, 2026

Threat Intelligence #zero-day #supply-chain #TrueConf #espionage #China #CVE-2026-3502

Chinese-nexus actors exploited a zero-day in TrueConf to hijack the update mechanism and push trojanized updates to Southeast Asian government agencies.

Read More