Do Son CISA confirms two TrueConf Server flaws, CVE-2026-72529 and CVE-2026-72530, are exploited in the wild to deliver PhantomCore malware. Patch now.
Head Mare
A Head Mare TrueConf attack chains two zero-days to install the PhantomCore backdoor via a trojanized client.
Kaspersky reveals critical NTLM flaws active in 2025. Attackers use "clickless" exploits like CVE-2024-43451 to steal credentials and gain SYSTEM privileges.
Explore the latest revelations on Head Mare's cyber tactics and their collaboration with Twelve in recent attacks on Russian companies.