Security researcher reveal Zoom flaws

Stefan Mileschin · 14th August 2022, 11:39

Zoom's automatic update option can help users ensure that they have the latest, safest version of the video conferencing software, which has had multiple privacy and security issues over the years. A Mac security researcher, however, has reported vulnerabilities he found in the tool that attackers could have exploited to gain full control of a victim's computer at this year's DefCon. According to Wired, Patrick Wardle presented two vulnerabilities during the conference. He found the first one in the app's signature check, which certifies the integrity of the update being installed and examines it to make sure that it's a new version of Zoom. In other words, it's in charge of blocking attackers from tricking the automatic update installer into downloading an older and more vulnerable version of the app.

https://www.engadget.com/zooms-autom...9.html?src=rss

14th August 2022, 11:39	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 153,542	Security researcher reveal Zoom flaws Zoom's automatic update option can help users ensure that they have the latest, safest version of the video conferencing software, which has had multiple privacy and security issues over the years. A Mac security researcher, however, has reported vulnerabilities he found in the tool that attackers could have exploited to gain full control of a victim's computer at this year's DefCon. According to Wired, Patrick Wardle presented two vulnerabilities during the conference. He found the first one in the app's signature check, which certifies the integrity of the update being installed and examines it to make sure that it's a new version of Zoom. In other words, it's in charge of blocking attackers from tricking the automatic update installer into downloading an older and more vulnerable version of the app. https://www.engadget.com/zooms-autom...9.html?src=rss

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
'MalwareTech' security researcher pleads guilty	Stefan Mileschin	WebNews	0	22nd April 2019 08:27
Huge DDoS attack takes down popular security researcher's site	Stefan Mileschin	WebNews	0	26th September 2016 08:58
Researcher finds huge security flaws in Bluetooth locks	Stefan Mileschin	WebNews	0	12th August 2016 07:46
Security researcher: Globalstar GPS at risk of hackers	Stefan Mileschin	WebNews	0	3rd August 2015 06:53
FBI: Security researcher claimed to hack, control plane in flight	Stefan Mileschin	WebNews	0	18th May 2015 10:02
Researcher says Apple hasn't fixed major OS X security flaw	Stefan Mileschin	WebNews	0	22nd April 2015 07:07
Facebook grants $33,500 to security researcher who discovers fatal security flaw	Stefan Mileschin	WebNews	0	27th January 2014 10:16
Security researcher is paid $12,500 by Facebook	Stefan Mileschin	WebNews	0	3rd September 2013 09:01
Security appliances are riddled with serious vulnerabilities, researcher says	jmke	WebNews	0	15th March 2013 11:53
Vista DRM Cracked by Security Researcher	jmke	WebNews	0	30th January 2007 11:49