Hackers breach TrueConf to trojanize client installers with backdoors

A BleepingComputer security-news feed reports multiple significant cyber incidents and vulnerabilities, including exploitation of unpatched TrueConf servers to trojanize installers, a zero-day Metabase SQL injection used for data theft, SharePoint compromises, macOS infostealer campaigns, extortion activity against financial organizations, and attacks disrupting critical infrastructure. The feed also covers large-scale breaches, social engineering, cloud data theft, speculative-execution research, and ransomware-related law enforcement actions.