Operation TrueChaos: Exploitation of TrueConf Zero-Day Vulnerability

Operation TrueChaos exploited a zero-day in TrueConf (CVE-2026-3502) that bypassed update integrity checks, allowing attackers to execute arbitrary files by replacing legitimate updates. The campaign targeted government entities in Southeast Asia via compromised on-premises TrueConf servers, was attributed to a Chinese-nexus threat actor, and a patch was released in March 2026.