Cve-2026-3502

threat-intel 2026-04-01 High
TrueConf Zero-Day Weaponized by Chinese-Nexus APT to Backdoor Southeast Asian Governments
Operation TrueChaos exploited CVE-2026-3502 in TrueConf's update mechanism to push Havoc C2 payloads across government networks via a compromised on-premises server.
trueconf zero-day supply-chain apt cve-2026-3502 havoc dll-sideloading

TrueConf Zero-Day Weaponized by Chinese-Nexus APT to Backdoor Southeast Asian Governments