With one exploit, a security researcher found a way to access - and download - a company's videos previously recorded to the cloud through an unsecured link. April 16 Two new massive Zoom exploits uncoveredĪ security researcher has discovered two new crucial privacy vulnerabilities in Zoom. The button will be added to Zoom users' security menu, and will help capture a Zoombomber's IP address if they are not using a proxy or virtual private network to obscure the information. The new button is aimed at helping reduce Zoombombing instances by helping Zoom collect data about the users infiltrating affected meetings.

PC Magazine reported Monday that Zoom would be updated April 26 to include a button which allows meeting participants to report an abusive user. 'We misjudged the situation and did not respond quickly enough - and that's on us,' he wrote. In a July 2019 blog post, CEO Yuan apologized. After hackers discovered the exploit and Dropbox presented the findings to Zoom, Zoom took more months to fix the problem, and did so only after an additional vulnerability was discovered using the same underlying exploit. 1/- Jeremy Issacharoff ApApril 20 Former Dropbox engineers say Zoom knew about security flawsįormer engineers at Dropbox, a Zoom partner, said both companies knew about a significant security flaw that allowed an attacker to control some users' Mac computers for several months before the issue was resolved, according to a New York Times report. Morphisec Labs said it has made Zoom aware of the security flaw and is offering its own proprietary security tool to counter the potential malware attack.ĭuring a zoom meeting on the eve of #Holocaust Memorial Day by the Embassy of Israel in Berlin that hosted survivor Zvi Herschel, anti-Israel activists disrupted his talk posting pictures of Hitler and shouting anti-Semitic slogans. The malware also prevents any users in a meeting from being made aware of the recording. The flaw, triggered by specific malware, could allow attackers to do this even when the host has disabled recording functionality for participants. Researchers at Morphisec Labs have identified a Zoom app bug that could enable malicious actors to record Zoom sessions and capture chat text without any of the meeting participants' knowledge, according to a release from the firm. Malware could allow unauthorized recording

Other improvements include a user interface update moving security settings into a more accessible position, wider control over which regional servers your data is routed through and improvements to the complexity of cloud recording passwords.

Zoom 5.0 is slated to use AES 256-bit encryption for increased privacy protection, and will be enabled across all accounts by May 30, the company said. In a Wednesday blog post, Zoom said it would be rolling out a new security update to the software, focusing on improved encryption.

Zoom keybase app images from being