A threat campaign tracked as ‘TrueChaos’ is actively exploiting an unpatched zero-day in TrueConf video conferencing software, targeting government and military organizations in Southeast Asia. Attackers have compromised TrueConf’s update mechanism to deliver malware, converting a trusted software channel into a distribution vector. CISA KEV inclusion is reported in secondary sources but not confirmed in primary CISA structured data; operators should verify status directly at cisa.gov/known-exploited-vulnerabilities-catalog. Organizations using TrueConf should treat this as an urgent remediation priority regardless of sector.