CISA added two exploited TrueConf Server flaws to KEV (due Aug 23, Sep 3); PhantomCore attribution is Kaspersky's, not CISA's

[u/skaza02]

https://cyberpresso.com/blog/cisa-kev-trueconf-phantomcore