Reports mentioning Zoom
AI notetaking tools, such as those offered by Otter, Zoom, and Granola, are increasingly being used to record and transcribe meetings, one-on-ones, and other professional interactions. While their primary function is to save time by summarizing discussions, capturing action items…
An artificial intelligence system developed a critical exploit for Zoom's video conferencing software in a single day, a feat that typically requires extensive human effort and expertise. This AI-generated exploit could enable a malicious actor within a Zoom meeting…
A significant security vulnerability discovered in Zoom's annotation feature could have enabled malicious actors to gain unauthorized control over other participants' devices or the presenter's shared screen during a meeting.
Cybersecurity researchers have detailed an active, multi-wave campaign that leverages social engineering tactics to deploy Remote Monitoring and Management (RMM) programs, specifically ConnectWise ScreenConnect. This campaign, codenamed SMOKE#SCREEN by Securonix Threat Labs, utilizes deceptive lures centered on common software updates…
North Korean threat actors, identified as BlueNoroff, are actively employing a phishing kit that impersonates the videoconferencing platforms Zoom and Microsoft Teams. This operation, linked to previous ClickFix-style campaigns that utilized typosquatted domains for Zoom and Microsoft Teams, aims…
A financially motivated Russian threat actor, identified as UAT-11795, is actively distributing a new backdoor malware named Starland RAT. This actor is achieving distribution by trojanizing legitimate software, specifically targeting popular video conferencing applications such as Cisco WebEx and Zoom.
Zoom released security updates this week to address a critical vulnerability in its Windows applications that could allow attackers to take over user accounts. The flaw, identified as CVE-2026-53412, carries a high severity score of 9.8 on the CVSS scale…
Zoom issued a security advisory this week detailing a critical vulnerability affecting its desktop client and software development kit (SDK) for Windows. This flaw, identified as CVE-2024-28982, could enable an unauthenticated attacker to gain unauthorized access to user accounts.