← threat actors
how they got in
- software update 1 · Aug 9
sectors
- government 1 · Aug 22
- technology 1 · Aug 9
geography
- cis 1 · Aug 22
- russia 1 · Aug 22
techniques
- exploitation 1 · Aug 22
- server breach 1 · Aug 9
- trojanization 1 · Aug 9
attack phases seen
- Initial access 2 · Aug 22
- Execution 1 · Aug 22
- Persistence 1 · Aug 9
what we reported, newest first, grouped by story
August 22, 2026
- CISA ordered federal agencies to patch two actively exploited TrueConf Server flaws, the self-hosted conferencing platform widely deployed in Russia and CIS states (BleepingComputer). The Head Mare hacktivist group is exploiting the bugs to deploy PhantomCore malware (SecurityWeek).
· Aug 22 · observed · Vulnerabilities & Exploits
August 9, 2026
- Head Mare breached TrueConf video-conferencing servers to trojanize client installers, swapping legitimate downloads for backdoored versions by exploiting unpatched instances (BleepingComputer).
· Aug 9 · observed · via software update · Threat Activity