DanSec

Vendor

TrueConf

In 8 briefs, most recently 22 August 2026. RSS for this tag

Learn more: Vulnerabilities (NVD) ↗

Known exploited (CISA KEV)

3 TrueConf vulnerabilities are on CISA's list of vulnerabilities exploited in the wild. Most recent:

Coverage in DanSec Daily

  1. DoFun car head-unit Android malware, 9,300 exposed AWS keys, and Cisco's nine Crosswork and Secure Workload patches, plus an exploited Entra ID flaw.
  2. ClarityCheck leaks 9M face images, Operation CameraSwarm hijacks 14,000 Dahua cameras, and GitLab flaw CVE-2026-19478 is exploited.
  3. Microsoft August Patch Tuesday zero-days, Cisco ASA/FTD exploitation, Mozilla signing key exposure, and Gunra ransomware warnings.
  4. Polish CHP plant hacked via private cellular APN, LexisNexis and Valve/CEVA breaches, and actively exploited Progress Kemp LoadMaster flaw.
  5. TrueConf breach pushes trojanized installers via Head Mare; Atlassian Rovo "RovoBlast" one-click flaw exposes Jira, Confluence and SharePoint data.
  6. Drift DEX's $285M North Korea-attributed heist, the Axios npm supply chain compromise, and the TeamPCP campaign hitting European Commission cloud systems.
  7. Axios npm supply chain backdoor by North Korean actors, TrueConf zero-day abused via malicious updates, and 2.3M Android devices infected by NoVoice malware.
  8. Cisco source code theft, Axios npm hijack spreading malware, and Iranian Pay2Key pseudo-ransomware campaigns.