Unauthorized Access Vulnerability in Dahua PTZ Cameras

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. An unauthorized access vulnerability exists in Dahua PTZ cameras, which can be exploited by attackers to obtain sensitive information...

FBI Releases Guidance on Defending Against VTC Hijacking and Zoom-bombing

The Federal Bureau of Investigation FBI has released an article on defending against video-teleconferencing VTC hijacking referred to as “Zoom-bombing” when attacks are to the Zoom VTC platform. Many organizations and individuals are increasingly dependent on VTC platforms, such as Zoom and...

Unspecified Vulnerability in Zoom Client for Meetings

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. An unspecified vulnerability exists in Zoom Client for Meetings. An attacker can exploit the vulnerability to access the microphone and camera with the help of a specially crafted library...

Unspecified Vulnerability in Zoom Client for Meetings (CNVD-2020-28479)

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. An unspecified vulnerability exists in Zoom Client for Meetings, which stems from the program copying the runwithroot script to a user-writable temporary directory during installation, which can...

CVE-2020-11470

Zoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement, which allows a local process with the user's privileges to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Zoom Client's microphone and camera access...

CVE-2020-11470

Zoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement, which allows a local process with the user's privileges to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Zoom Client's microphone and camera access...

CVE-2020-11469

Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during installation, which allows a local process with the user's privileges to obtain root access by replacing runwithroot...

CVE-2020-11469

Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during installation, which allows a local process with the user's privileges to obtain root access by replacing runwithroot...

Design/Logic Flaw

Zoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement, which allows a local process with the user's privileges to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Zoom Client's microphone and camera access...

Design/Logic Flaw

Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during installation, which allows a local process with the user's privileges to obtain root access by replacing runwithroot...

CVE-2020-11469

Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during installation, which allows a local process with the user's privileges to obtain root access by replacing runwithroot...

CVE-2020-11469

CVE-2020-11469 affects Zoom Client for Meetings on macOS up to version 4.6.8. The root cause is that during installation Zoom copies the runwithroot executable to a user-writable temporary directory, enabling a local attacker with user privileges to replace runwithroot and gain root access. This ...

CVE-2020-11470

Zoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement, which allows a local process with the user's privileges to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Zoom Client's microphone and camera access...

CVE-2020-11470

CVE-2020-11470 affects Zoom Client for Meetings on macOS (versions up to 4.6.8). The root cause is the disable-library-validation entitlement, which enables a local process with user privileges to load a crafted library and thereby gain unprompted microphone and camera access. This could allow an...

Two Zoom Zero-Day Flaws Uncovered

UPDATE Two zero-day flaws have been uncovered in Zoom’s macOS client version, according to researchers. The web conferencing platform vulnerabilities could give local, unprivileged attackers root privileges, and allow them to access victims’ microphone and camera. As of Thursday, the two...

The Zoom Privacy Backlash Is Only Getting Started

A class action lawsuit. Rampant zoombombing. And as of today, two new zero-day vulnerabilities...

Zoom Scrutinized As Security Woes Mount

The New York attorney general, Letitia James, is demanding more information about how Zoom secures user data. The inquiry comes amidst mounting public scrutiny of the web conferencing platform’s data privacy and security policies. In a Monday letter, James questioned whether Zoom’s security...

Watch out; cyber criminals are Zoom-bombing video conferences

By Sudais Asif Zoom-bombing is when someone interrupts a video conference through... This is a post from HackRead.com Read the original post: Watch out; cyber criminals are Zoom-bombing video conferences...

Zoom Kills iOS App’s Data-Sharing Facebook Feature

Zoom has removed a feature in its iOS web conferencing app that was sharing analytics data with Facebook, after a report revealing the practice sparked outrage. According to the Motherboard report last week that originally disclosed the privacy issue, the transferred information included data on...

Working from home? Hackers can drop malware with fake Zoom apps

By Sudais Asif There has been a drastic rise in phishing attempts against Zoom and now, hackers are using different techniques... This is a post from HackRead.com Read the original post: Working from home? Hackers can drop malware with fake Zoom apps...