Operation TrueChaos: 0-Day Exploitation Against Southeast Asian Government Targets
2026-04-05T20:52:31Z•b3e2e9e2709a4067a813cd749761c51b5a25ba719dcb8c59cb4c755d993829c1
ai-assisted-malwareanthropicapi-token-exfiltrationchatgpt-data-leakagecheck-point-researchclaude-codecode-execution-runtimecve-2025-59536cve-2026-21852cve-2026-3502government-targetinghandala-hackiranian-actorsrcesilver-dragonsoutheast-asiathreat-intelligencetrueconfvoidlinkzero-day
What happened
Check Point Research reported multiple high-impact findings in March 2026: Operation TrueChaos revealed an actively exploited zero-day in the TrueConf client (CVE-2026-3502, CVSS 7.8) used against Southeast Asian government targets. CPR also disclosed critical remote code execution and API token exfiltration issues in Anthropic’s Claude Code (CVE-2025-59536 and CVE-2026-21852). The feed includes broader intelligence on AI-related threats (AI-assisted malware, VoidLink), ChatGPT/Code Execution runtime data-leakage via a hidden outbound channel, and multiple threat actor reports (Silver Dragon /
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- checkpoint_research
- Record identifier
- b3e2e9e2709a4067a813cd749761c51b5a25ba719dcb8c59cb4c755d993829c1
- Enrichment time
- 2026-04-05T20:52:31Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.