TT-CSIRT-4126.96.36.199: 3CX Security Advisory
VoIP/IP PBX solutions provider 3CX has released a security advisory concerning the compromise of their desktop app for both Windows and MacOS in a supply chain attack. 3CX recommends that users migrate to the PWA app in the interim until the desktop apps are fixed. The PWA app is web-based and is unaffected by the supply chain attack.
TT-CSIRT encourages administrators to review the following releases and take the necessary actions immediately: