Fake Zoom installers infect PCs with RevCode WebMonitor RAT

By Deeba Ahmed Zoom is being actively targeted by hackers in the past few weeks. Now, hackers are dropping fake Zoom installers with RevCode WebMonitor RAT. This is a post from HackRead.com Read the original post: Fake Zoom installers infect PCs with RevCode WebMonitor RAT...

Zoom IT installer unauthorized operation vulnerability

Zoom IT is a screen zoom and annotation tool for technical presentations from Zoom USA. A security vulnerability exists in versions of Zoom IT installer ZoomInstallerFull.msi prior to 4.6.10 for Windows-based platforms. An attacker can exploit the vulnerability to delete restricted files...

CVE-2020-11443

The Zoom IT installer for Windows ZoomInstallerFull.msi prior to version 4.6.10 deletes files located in %APPDATA%\Zoom before installing an updated version of the client. Standard users are able to write to this directory, and can write links to other directories on the machine. As the installer...

CVE-2020-11443

The Zoom IT installer for Windows ZoomInstallerFull.msi prior to version 4.6.10 deletes files located in %APPDATA%\Zoom before installing an updated version of the client. Standard users are able to write to this directory, and can write links to other directories on the machine. As the installer...

CVE-2020-11443

The vulnerability CVE-2020-11443 affects the Zoom IT Windows installer (ZoomInstallerFull.msi) prior to version 4.6.10. The installer runs with SYSTEM privileges and deletes files under %APPDATA%\Zoom by following user-writable links to other directories, enabling a user to delete files they norm...

CVE-2020-11443

The Zoom IT installer for Windows ZoomInstallerFull.msi prior to version 4.6.10 deletes files located in %APPDATA%\Zoom before installing an updated version of the client. Standard users are able to write to this directory, and can write links to other directories on the machine. As the installer...

This Week in Security News: Shade Ransomware Shuts Down, Releases Decryption Keys and WebMonitor RAT Bundled with Zoom Installer

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, read about how the operators of the Shade Troldesh ransomware have shut down and released more than 750,000 decryption keys. Also, learn abo...

Securing Internet Videoconferencing Apps: Zoom and Others

The NSA just published a survey of video conferencing apps. So did Mozilla. Zoom is on the good list, with some caveats. The company has done a lot of work addressing previous security concerns. It still has a bit to go on end-to-end encryption. Matthew Green looked at this. Zoom does offer...

Troves of Zoom Credentials Shared on Hacker Forums

Hackers have a new favorite topic of conversation on underground forums: How to obtain – and leverage – valuable credentials for Zoom, Skype, Webex and other web conferencing platforms increasingly used by remote workers. That’s what Etay Maor, chief security officer at IntSights, has discovered...

Zoom Call Recording Cross-Site Scripting Vulnerability

Zoom Call Recording is a scalable session recording management solution from Zoom USA. The product supports features such as recording, managing and finding session records. A cross-site scripting vulnerability exists in Zoom Call Recording version 6.3.1. The vulnerability stems from a lack of...

CVE-2019-18223

ZOOM International Call Recording 6.3.1 suffers from multiple authenticated stored XSS vulnerabilities via the phoneNumber field in the 1 User Edit or 2 User Add form, 3 name field in the Role Add form, 4 name or number field in the Edit Group form, 5 tagKey or tagValue field in the Recording Rul...

CVE-2019-18223

ZOOM International Call Recording 6.3.1 suffers from multiple authenticated stored XSS vulnerabilities via the phoneNumber field in the 1 User Edit or 2 User Add form, 3 name field in the Role Add form, 4 name or number field in the Edit Group form, 5 tagKey or tagValue field in the Recording Rul...

Cross site scripting

ZOOM International Call Recording 6.3.1 suffers from multiple authenticated stored XSS vulnerabilities via the phoneNumber field in the 1 User Edit or 2 User Add form, 3 name field in the Role Add form, 4 name or number field in the Edit Group form, 5 tagKey or tagValue field in the Recording Rul...

CVE-2019-18223

ZOOM International Call Recording 6.3.1 suffers from multiple authenticated stored XSS vulnerabilities via the phoneNumber field in the 1 User Edit or 2 User Add form, 3 name field in the Role Add form, 4 name or number field in the Edit Group form, 5 tagKey or tagValue field in the Recording Rul...

CVE-2019-18223

The CVE-2019-18223 entry concerns Zoom Call Recording (version 6.3.1) and describes authenticated stored XSS vulnerabilities. Multiple input vectors are identified, including: (1) phoneNumber in User Edit/Add forms, (2) name in Role Add form, (3) name or number in Edit Group, (4) tagKey/tagValue ...

Hackers deface church service on Zoom with child abuse content

By Deeba Ahmed Just yesterday it was reported that a critical Zoom vulnerability lets hackers record meetings anonymously... This is a post from HackRead.com Read the original post: Hackers deface church service on Zoom with child abuse content...

Zoom Upgrades Encryption Keys to What It Promised All Along

Plus: Facebook data on the dark web, Nintendo accounts keep getting hacked, and more of the week's top security news...

New Zoom vulnerability lets hackers record any meeting anonymously

By Waqas This Zoom vulnerability lets hackers record meetings even when host disables recording functionality for participants. This is a post from HackRead.com Read the original post: New Zoom vulnerability lets hackers record any meeting anonymously...

Vulnerability Spotlight: Zoom Communications user enumeration

Video conferencing and calling software has spiked in popularity as individuals across the globe are forced to stay home due to the COVID-19 pandemic. There are a plethora of players in this space, with one or two getting increased attention. One service in particular — Zoom — has received an...

NFL Tackles Cybersecurity Concerns Ahead of 2020 Draft Day

The NFL draft is slated to start Thursday, and thanks to the COVID-19 pandemic, it will be the first virtual version of the event ever presented. This raises a few cybersecurity concerns, according to researchers and the teams themselves — but the NFL is planning on knocking the security ball...