Researchers at A.Security have discovered a critical vulnerability dubbed 'Zoomsday' in Zoom Workplace that could allow any meeting participant to take over another user's device. The exploit, which leveraged AI assistance with fewer than 20 prompts, targeted a flaw in Zoom's annotation functionality. This vulnerability could enable attackers to steal data, activate cameras or microphones, or install malware without any visible indication to the victim. Zoom has since released patches for the vulnerability across all major operating systems, including Windows, macOS, Linux, Android, and iOS. AI
IMPACT Lowers the barrier for discovering critical vulnerabilities, potentially accelerating the pace of cyberattacks.
RANK_REASON Discovery of a critical vulnerability in a widely used product, enabled by AI, impacting millions.
- android
- Idan Levcovich
- iOS
- Linux
- macOS
- Microsoft Windows
- Wired
- Zoom
- Zoomsday
- A.Security
- Zoom Workplace
AI-generated summary · Google Gemini · from 2 sources. How we write summaries →