CVE-2026-3502

• TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore

  TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore The threat actor known as Head Mare has been observed weaponizing security flaws in unpatched TrueConf servers once again in attacks targeting Russian companies spanning instrumentation, electronics, t

• 6th April – Threat Intelligence Report

  6th April – Threat Intelligence Report For the latest discoveries in cyber research for the week of 30th March, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES The European Commission, the European Union’s executive body, has confirmed a data bre

• Operation TrueChaos: 0-Day Exploitation Against Southeast Asian Government Targets

  Operation TrueChaos: 0-Day Exploitation Against Southeast Asian Government Targets Key Points Introduction At the beginning of 2026, Check Point Research observed a series of targeted attacks against government entities in Southeast Asia carried out via a legitimate TrueConf sof

• ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

  ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link Cybersecurity researchers have disclosed a critical vulnerability in OpenAI's ChatGPT Workspace Agents that could have allowed a single phishing link to stealthily build, authorize, and deploy an au

All reports →