Security Zoom Video Conferencing Security Flaws

eva2000 · Apr 3, 2020

More folks are turning to video conferencing software while working from home during Corona virus pandemic. But one video conferencing tool, Zoom is becoming very popular. However, folks need to be aware of all the Zoom security flaws being found. This thread is just to share those security issues

Attackers can take full root control of a Macs https://9to5mac.com/2020/04/01/new-zoom-bugs-takeover-macs-cam-mic-root/

Now two new bugs have been dscovered that allow hackers to take control of Macs including the webcam, microphone, and even **full root access**.
Click to expand...

Attackers can steal Windows users' credentials Attackers can use Zoom to steal users’ Windows credentials with no warning

Users of Zoom for Windows beware: the widely used software has a vulnerability that allows attackers to steal your operating system credentials, researchers said.
Click to expand...

No end to end encryption Zoom's end-to-end encryption isn't actually end-to-end at all. Good thing the PM isn't using it for Cabinet calls. Oh, for f...

Most notably, the company has been forced to admit that although it explicitly gives users the option to hold an “end-to-end encrypted” conversation and touts end-to-end encryption as a key feature of its service, in fact it offers no such thing.

Specifically, it uses TLS, which underpins HTTPS website connections and is significantly better than nothing. But it most definitely is not end-to-end encryption (E2E). E2E ensures all communications are encrypted between devices so that not even the organization hosting the service has access to the contents of the connection. With TLS, Zoom can intercept and decrypt video chats and other data.
Click to expand...

eva2000 · Apr 3, 2020

Looks like Zoom CEO has announced product feature freeze to focus on the security issues Zoom freezes feature development to fix security and privacy issues – TechCrunch

the company’s CEO Eric S. Yuan has written a lengthy blog post to address some of the concerns around Zoom. He starts by sharing some metrics. Zoom has been used by 90,000 schools around 20 countries. Daily meetings participants jumped from 10 million in December to 200 million in March.

But some companies are starting to reconsider using Zoom for video conferences. For instance, SpaceX, Elon Musk’s rocket company, has banned its employees from using the service.

For the next 90 days, Zoom is enacting a feature freeze, which means that the company isn’t going to ship any new feature until it is done fixing the current feature set. Zoom will also work with third-party experts and prepare a transparency report.
Click to expand...

Log in / Register

Forums

Learn about Centmin Mod LEMP Stack today

Security Zoom Video Conferencing Security Flaws

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Learn about Centmin Mod LEMP Stack today

Security Zoom Video Conferencing Security Flaws

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

.