‘Zoomsday’ hack uncovered using fewer than 20 AI prompts
Zoom has patched a major security vulnerability that could allow an attacker to hijack anyone's device during a meeting. In a blog post on Tuesday, researchers at A Security say they uncovered the flaw using "fewer than 20 prompts on publicly available AI models," as reported earlier by Wired. The exploit involved Zoom's annotation feature, which allows users to draw on their screen while sharing it with other meeting participants. With the exploit, an attacker could join or ho
Get smart on it
Researchers discovered a major security vulnerability in Zoom's annotation feature that could allow attackers to run malicious code on victims' devices during meetings, potentially stealing data, enabling cameras or microphones, or installing malware. The vulnerability was significant because creating working exploits for such flaws historically required nation-state level resources, expertise, and months of effort, but researchers uncovered this one using fewer than 20 prompts on publicly available AI models in a single day. The exploit required no action from victims and showed no visual signs of compromise, making it particularly dangerous. Zoom issued a patch for the vulnerability across all its platforms on Tuesday.
Related news
Amazon Can Use Your Twitch Content to Train Its AI, Unless You Opt Out
When Twitch announced that streamers could opt out, thousands of users questioned why their content was being used to train AI models in the first place.
Tech Visionary Says the Big AI Labs Don’t Get What People Want
Tim O’Reilly built a publishing empire that AI is helping to destroy. Yet he loves AI—as long as it’s open source.
