NEWSTrueConf CVE-2026-3502 zero-day abused to push malicious updates from trusted serversApr 1, 2026 · 1 min read