Chinese hackers exploit TrueConf zero-day in government attacks, prompting urgent US patch directive

A critical zero-day vulnerability in TrueConf, a widely used video conferencing software, has been exploited by Chinese hackers in attacks against Asian government organizations. The threat actor leveraged the flaw to gain reconnaissance capabilities, escalate privileges, and execute further malicious payloads. Recognizing the severity of the threat, CISA has issued an urgent directive requiring all US government agencies to apply patches within two weeks to prevent similar exploitation domestically.