EUVD-2026-62951

In versions below 3.2.2 of the Zoom app for Splunk SOAR, a user who holds a role with permission to run actions could expose meeting and personal meeting ID passwords by invoking one of the create meeting, update meeting, or update user settings actions, because the affected password and...

CVE-2026-76386

In Zoom app for Splunk SOAR versions below 3.2.2, the "password" and "pmi_password" action parameters are not masked, causing cleartext exposure of Zoom meeting passwords and personal meeting ID passwords in the UI when a user with action-running privileges invokes create/update meeting or update...

Malicious code in zoom-app-workshop (npm)

The package zoom-app-workshop was found to contain malicious code...

MAL-2025-41058 Malicious code in zoom-app-workshop (npm)

The package zoom-app-workshop was found to contain malicious code...

Zoom Client for Meetings 5.10.6 < 5.12.0 Vulnerability (ZSB-22023)

The version of Zoom Client for Meetings installed on the remote host is between 5.10.6 and 5.12.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-22023 advisory. - Zoom Client for Meetings for macOS Standard and for IT Admin starting with 5.10.6 and prior to 5.12.0 contain...

Fake Zoom App Dropped by New APT ‘Luminous Moth’

Researchers have spotted a weird one: A newly identified threat actor linked to China that’s first mass-attacking, but then cherry-picking, just a few targets to hit with malware and data exfiltration. Kaspersky researchers said in a Wednesday writeup that they’ve named the advanced threat actor...

China's Cyberspies Targeting Southeast Asian Government Entities

A sweeping and "highly active campaign" that originally set its sights on Myanmar has broadened its focus to strike a number of targets located in the Philippines, according to new research. Russian cybersecurity firm Kaspersky, which first spotted the infections in October 2020, attributed them ...

This Week in Security News: More Than 8,000 Unsecured Redis Instances Found in the Cloud and Wiper Malware Called “Coronavirus” Spreads Among Windows Victims

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about 8,000 Redis instances running unsecured in different parts of the world, even deployed in public clouds. Also, read about a new...