This shocking Zoom bug allowed silent device takeovers on Android and iOS
A zero-click bug allowed attackers to silently take control during live Zoom calls.
A previously unknown Zoom security flaw could enable malicious participants to remotely take control of other users' devices during a call without any interaction from the victim, researchers have discovered. Using publicly accessible AI models, the researchers exploited the vulnerability with fewer than 20 prompts. Zoom has since patched the flaw, emphasizing that updating the Zoom app is crucial for users.
The worrying aspect of this discovery is the speed at which frontier AI models are transforming the cybersecurity landscape, from overcoming technical barriers to raising concerns over AI-driven threats and increased regulatory scrutiny. The flaw affected Zoom clients on Windows, macOS, Linux, iOS, and Android devices. Most critically, the attack did not require any action from the victim beyond simply being in the same Zoom meeting.
Written by urgent.news from Android Authority's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
