U.S. CISA adds a flaw in TrueConf Client to its Known Exploited Vulnerabilities catalog

CISA added CVE-2026-3502 — a TrueConf Client flaw that allows unverified updates to be installed — to its Known Exploited Vulnerabilities catalog after reports that attackers compromised on‑premises TrueConf update servers to push malicious updates (delivering the Havoc framework) to government video‑conferencing deployments; Check Point calls the activity Operation TrueChaos, links it to a China‑aligned actor, and CISA ordered federal remediation by April 16, 2026.