A security researcher has uncovered a vulnerability in the video conferencing platform Zoom that allows hackers to see whatever the user’s webcam is pointing at and, in the case of Macs, to launch a denial-of-service (DoS) attack. Jonathan Leitschuh said a fix launched by Zoom to tackle the DoS issue was not good enough. The bug affects all versions of Zoom, including Mac OS X 10.7 and above. Zoom allows call URLs to launch automatically on Macs to avoid users having to approve every Zoom call separately on their browser. Machines using Windows have a similar feature.
A security researcher has uncovered a vulnerability in the video conferencing platform Zoom that allows hackers to see whatever the user’s webcam is pointing at and, in the case of Macs, to launch a denial-of-service (DoS) attack. Jonathan Leitschuh said a fix launched by Zoom to tackle the DoS issue was not good enough. The problem stems from a feature launched by Zoom to simplify starting the app. Zoom allows call URLs to launch automatically on Macs to avoid users having to approve every Zoom call separately on their browser. Machines using Windows have a similar feature.