March 30, 2023, 6:07 a.m. | Satnam Narang

Cyber Exposure Alerts www.tenable.com

A softphone desktop application from 3CX, makers of a popular VoIP PBX solution used by over 600,000 organizations, has reportedly been trojanized as part of a supply chain attack. CVE-2023-29059 was assigned for this issue on March 30.




Update March 30 #4: This blog has been updated to reflect the availability of a version check plugin for the 3CX desktop apps containing malware, an updated version of the 3CX DesktopApp for Windows and macOS, a CVE identifier (CVE-2023-29059) assigned for …

3cx app application attack blog compromised cve cve-2023-29059 desktop desktop application issue macos march organizations popular solution supply supply chain supply chain attack update voip windows

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Director, Cybersecurity - Governance, Risk and Compliance (GRC)

@ Stanley Black & Decker | New Britain CT USA - 1000 Stanley Dr

Information Security Risk Metrics Lead

@ Live Nation Entertainment | Work At Home-Connecticut

IT Product Owner - Enterprise DevSec Platform (d/f/m)

@ Airbus | Hamburg - Finkenwerder

Senior Information Security Specialist

@ Arthur Grand Technologies Inc | Arlington, VA, United States

Information Security Controls SME

@ Sword | Aberdeen, Scotland, United Kingdom