CISA Adds Two Remotely Exploitable TrueConf Server Vulnerabilities to KEV Catalog
The US Cybersecurity and Infrastructure Security Agency (CISA) has added two remotely exploitable vulnerabilities in TrueConf Server to its Known Exploited Vulnerabilities (KEV) catalog, warning that both flaws are already being exploited in the wild.
TrueConf Server is a video conferencing and communication platform developed by TrueConf. On August 20, 2026, CISA included CVE-2026-72529 and CVE-2026-72530 in the KEV list after confirming active exploitation.
CVE-2026-72529 stems from missing authentication in a critical function, allowing unauthenticated remote attackers to execute arbitrary scripts. CVE-2026-72530 is a code injection vulnerability that permits attackers to break out of the isolated environment and execute arbitrary code on the host system.
Both vulnerabilities can be exploited remotely over TCP port 4307 without any authentication. Kaspersky rated the issues with CVSS v3.1 base scores of 9.8 and 9.0, classifying both as Critical.
Federal agencies are required to remediate CVE-2026-72529 by August 23, 2026, and CVE-2026-72530 by September 3, 2026. All organizations using the product are advised to apply available patches or mitigations immediately due to the confirmed in-the-wild exploitation.
Related articles
Zombie Card Attack Revives Expired Visa Cards for Contactless NFC Payments
Researchers from the University of Massachusetts Amherst have demonstrated the Zombie Card attack, which enables contactless payments with certain expired Visa cards over NFC without breaking cryptography or cloning the card. The technique exploits inconsistencies in how payment terminals and issuing banks validate card expiration dates within the EMV protocol. By deploying two Android smartphones as a relay between the expired card and the terminal, the researchers intercepted the EMV field containing the expiration date and substituted a future date during the transaction. The terminal accepted the locally validated payment while the cryptographic data remained valid because Visa EMV Kernel 3 does not always bind the expiration field to the protected cryptogram. Testing showed varying bank responses: one issuer approved transactions of different amounts at multiple merchants, while another consistently declined them. The attack failed against Mastercard, American Express, and Discover due to stricter cross-checks or cryptographic protection of the expiration data. The method requires an active account and valid keys on the expired card, making it more complex than traditional skimming.
Critical Unauthenticated File Upload Flaw in Elementor Pro Allows Remote Code Execution on WordPress Sites
A critical vulnerability tracked as CVE-2026-32475 has been discovered in the Elementor Pro plugin for WordPress, enabling unauthenticated attackers to upload and execute arbitrary PHP code. The flaw resides in the file upload module where validation and saving processes handle empty filenames inconsistently across multipart requests. Attackers can bypass checks by sending one part with an empty filename and another containing a PHP backdoor, which gets stored in the publicly accessible wp-content/uploads/elementor/forms/ directory. Exploitation requires a published Elementor Pro form with the multiple-file upload option enabled, a setting that is disabled by default. The free version of Elementor remains unaffected, while the issue was resolved in Elementor Pro 4.2.2. Administrators are urged to update immediately and scan upload directories for unauthorized PHP files, as no active exploitation has been observed yet but public disclosure increases the risk.
Claude Discovers Vulnerabilities Across 16 SAML Projects in One Month, Exposing Maintenance Gaps
Security researcher Eric Chiang used Anthropic's Claude Opus model to identify vulnerabilities in 16 SAML implementations over roughly one month of evening work. The effort uncovered four full authentication bypasses in projects including Authentik, lightsaml, OneUptime, and saml-client, plus twelve additional signature bypass issues affecting secondary protocol messages. A notable finding was CVE-2026-57580 in Authentik, independently reported by eight researchers, which allowed XML comment injection in the NameID field to hijack accounts under specific configuration settings. Chiang built a two-phase agent pipeline that first searched for behavioral anomalies in libraries and then combined them into working exploits, without needing to train the model on prior SAML vulnerabilities. Many maintainers either ignored reports or struggled to distinguish real issues from AI-generated noise, with one project requiring three iterations of fixes before the patches held. The researcher concluded that while discovering SAML flaws has become inexpensive, patching them remains costly and under-resourced, reinforcing his long-standing recommendation to avoid custom SAML code in favor of established libraries or OpenID Connect.
Mind Games: 30 Years of Hacking and Securing Game Consoles
The article traces the evolution of security mechanisms in home game consoles from the unprotected Atari 2600 in 1977 through hardware locks, optical media protections, and cryptographic boot chains up to the seventh generation. Early systems like the NES relied on the 10NES/CIC chip for mutual authentication using identical Sharp SM590 microcontrollers, which was quickly defeated by Tengen's Rabbit clone and physical pin-clipping attacks. PlayStation introduced SCEx regional signals on discs, leading to widespread modchip installations and swap tricks that bypassed all code verification. Microsoft’s original Xbox implemented a full cryptographic chain of trust starting from the MCPX southbridge, yet it fell to HyperTransport bus sniffing by bunnie Huang and buffer overflows in titles such as MechAssault. Nintendo Wii’s Twilight Hack exploited a stack overflow via an excessively long horse name in The Legend of Zelda: Twilight Princess, enabling unsigned code execution. The piece highlights recurring lessons about the limits of security-through-obscurity and the necessity of protecting both boot chains and runtime memory handling.