{"uuid": "5981ff5f-f812-42a7-adf1-a332d8077dc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3502", "type": "exploited", "source": "https://t.me/thehackernews/8711", "content": "\u26a0\ufe0f A zero-day in TrueConf let attackers spread malware through its own update system.\n\nCVE-2026-3502 (CVSS 7.8) was exploited by compromising on-prem servers, pushing tampered updates to all connected clients in government networks across Southeast Asia.\n\n\ud83d\udd17 How the TrueChaos campaign weaponized software updates \u2192 https://thehackernews.com/2026/03/trueconf-zero-day-exploited-in-attacks.html", "creation_timestamp": "2026-03-31T16:29:03.000000Z"}