https://invaders.ie/resources/blog/vulnerability/cve-2026-3502-trueconf-kev-malware-update-channel Invaders Security en 2026-04-03T08:10:45.313Z CVE-2026-3502 turns TrueConf updates into a KEV-listed malware channel CVE-2026-3502, TrueConf vulnerability, TrueConf KEV, malicious software updates, on-prem update mechanism abuse, government cyber espionage https://invaders.ie/resources/blog/vulnerability/gigabyte-control-center-cve-2026-4415-remote-compromise-path Invaders Security en 2026-04-02T19:48:19.859Z GIGABYTE Control Center flaw turns a convenience utility into a remote compromise path GIGABYTE Control Center, CVE-2026-4415, arbitrary file write, remote code execution, privilege escalation, OEM utility risk, pairing feature, Windows device management, endpoint hardening, patch management