A security researcher has uncovered a vulnerability in the video conferencing platform Zoom that allows hackers to see whatever the user’s webcam is pointing at and, in the case of Macs, to launch a denial-of-service (DoS) attack. Jonathan Leitschuh said a fix launched by Zoom to tackle the DoS issue was not good enough. The bug affects all versions of Zoom, including Mac OS X 10.7 and above. Zoom says that this setup is in place as a “workaround” to a feature of Safari 12 that would require users to approve Zoom launching every time they click a call link. Zoom allows call URLs to launch automatically on Macs to avoid users having to approve every Zoom call separately on their browser. Machines using Windows have a similar feature.
A security researcher has uncovered a vulnerability in the video conferencing platform Zoom that allows hackers to see whatever the user’s webcam is pointing at and, in the case of Macs, to launch a denial-of-service (DoS) attack. Jonathan Leitschuh said a fix launched by Zoom to tackle the DoS issue was not good enough. The bug affects all versions of Zoom, including Mac OS X 10.7 and above. Zoom allows call URLs to launch automatically on Macs to avoid users having to approve every Zoom call separately on their browser. Machines using Windows have a similar feature.