Do Son CISA confirms two TrueConf Server flaws, CVE-2026-72529 and CVE-2026-72530, are exploited in the wild to deliver PhantomCore malware. Patch now.
PhantomCore
A Head Mare TrueConf attack chains two zero-days to install the PhantomCore backdoor via a trojanized client.