Hacktivist group Head Mare exploits TrueConf vulnerabilities to deliver backdoors

The attackers leverage vulnerabilities, tracked as KLCERT-26-057 and KLCERT-26-058, to execute arbitrary code and gain elevated privileges on the server, according to Kaspersky.