TrueConf Zero-Day Exploited in Asian Government Attacks

Feed covers multiple active and high-impact incidents: a TrueConf zero-day was exploited by a Chinese-linked actor against Asian government targets for reconnaissance, privilege escalation, and payload deployment; critical ShareFile vulnerabilities can be chained to bypass authentication and achieve unauthenticated remote code execution/file upload; React2Shell is being actively exploited in a large-scale credential harvesting campaign (750+ systems) using automated scanners and the Nexus Listener framework; North Korean actors drained $285M from Drift by taking over an admin key and executing