Zoom Screen-Sharing Bug Let People Fully Take Over Other Devices On A Call



Cybersecurity researchers discovered a fairly insidious bug in Zoom that lets people quite literally take control of someone else’s device. This is done by exploiting a flaw in the screen-sharing function. The vulnerability has been found in the Zoom Workspace app for Windows, Mac, iOS Android and Linux.

Attacks do not require the victim to do anything and there’s no visible warning. When someone launches the annotation tool while sharing the screen, the vulnerability lets bad actors remotely execute malicious code for access.

However, it remains to be seen if this vulnerability has ever been used in the wild. The researchers that found it used AI prompts to develop the screen-sharing exploit in under 24 hours, illustrating how AI could assist in cyberattacks.

“This class of capability would previously have only been available to nation-state threat actors, but the model requiring elite teams, months of effort and weapons-grade budgets has collapsed,” the cybersecurity company wrote in a blog post. “Today, a single researcher was able to develop a nation-state-level exploit in less than a day.”

Zoom was notified about the bug and has deployed various fixes to mitigate the threat. It says “users can help keep themselves secure by applying the latest updates.” The vulnerability exists in all Zoom Workspace versions prior to the latest updates.

Something similar just happened to Apple computers, forcing the company to issue various macOS updates. The newest versions, including Tahoe 26.6.1, Sequoia 15.7.9 and Sonoma 14.8.9 are all safe.





Source link

  • Related Posts

    Is It Safe to Eat Lettuce Yet?

    For a while it seemed like the diarrhea-inducing parasite cyclospora was everywhere. Confirmed and suspected cases number more than 22,000 across 15 states, with 517 people requiring hospitalization. Two people…

    Uber surprised robotics company Serve by selling its entire stake

    Uber has sold off its entire stake in Serve Robotics, the autonomous delivery robot company that spun out of the ride-hailing company more than five years ago. Uber made the…

    Leave a Reply

    Your email address will not be published. Required fields are marked *

    You Missed

    Trump’s ICE crackdown returns to the spotlight as the midterms loom: From the Politics Desk

    Trump’s ICE crackdown returns to the spotlight as the midterms loom: From the Politics Desk

    Australia politics live: Bragg to outline Coalition plans to heavily cut net migration and shred 96% of house construction code | Australian politics

    Australia politics live: Bragg to outline Coalition plans to heavily cut net migration and shred 96% of house construction code | Australian politics

    Manitoba’s first supervised consumption site opens in Winnipeg – Winnipeg

    Manitoba’s first supervised consumption site opens in Winnipeg – Winnipeg

    Is It Safe to Eat Lettuce Yet?

    Is It Safe to Eat Lettuce Yet?

    Trump’s reported covert flight puts spotlight on deceptive actions to protect the president: ANALYSIS

    Trump’s reported covert flight puts spotlight on deceptive actions to protect the president: ANALYSIS

    Petition signed by thousands calls for U.S. ambassador to be removed from Canada

    Petition signed by thousands calls for U.S. ambassador to be removed from Canada