PhantomCore Exploits TrueConf Vulnerabilities to Breach Russian Networks

Published: 2 days ago (April 27, 2026 at 07:54 AM EDT)

1 min read

Source: The Hacker News

Attack Overview

A pro‑Ukrainian hacktivist group called PhantomCore has been attributed to attacks actively targeting servers running TrueConf video‑conferencing software in Russia since September 2025. According to a report published by Positive Technologies, the threat actors are leveraging an exploit chain comprising three vulnerabilities to execute commands remotely on susceptible systems.

Back to Blog

CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV

Added Vulnerabilities - CVE‑2024‑1708 - CVSS v3.1 Score: 8.4 - Description: Path traversal vulnerability in ConnectWise ScreenConnect. - Reference: https://cve...

What to Look for in an Exposure Management Platform (And What Most of Them Get Wrong)

Every security team has a version of the same story. The quarter ends with hundreds of vulnerabilities closed. The dashboards are bursting with green. Then some...

Ransomware accidentally destroys all files larger than 128KB, preventing decryption — VECT code likely partly vibe coded with AI or used an old code base, security researchers suggest

!A man receiving a ransomware attack on both his phone and laptop - a poor day for the stock image actor.https://cdn.mos.cms.futurecdn.net/FRKea6agfJsYdo9T4XMVB...

GitHub rushed to fix a critical vulnerability in less than six hours

Incident Overview GitHub employees fixed a critical remote code execution vulnerability in less than six hours last month. Wiz Research used AI models to uncov...

Attack Overview

Related posts

CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV

What to Look for in an Exposure Management Platform (And What Most of Them Get Wrong)

Ransomware accidentally destroys all files larger than 128KB, preventing decryption — VECT code likely partly vibe coded with AI or used an old code base, security researchers suggest

GitHub rushed to fix a critical vulnerability in less than six hours