Corporate conferencing software provider Zoom patched a security flaw that could have enabled hackers to spy on private meetings, the company says. Check Point Software Technologies, the Israel-based security vendor, said Tuesday it uncovered the security vulnerability last year and alerted Zoom, which fixed the issue in an August software update. Attackers could have exploited the bug by creating a list of nine, 10 or 11-digit meeting identification numbers, then enter any meeting in those sessions that wasn’t protected by a password. If a user had failed to require a password to their conference, the meeting ID number would have been the only thing safeguarding the conversation from eavesdroppers, Check Point said. In response, Zoom updated its policies to add password to all scheduled meetings by default, make it more difficult for attackers to view meetings they might try to infiltrate and block devices that repeatedly scan for meeting IDs. […]
The post Zoom squashed a bug that left private meetings unprotected appeared first on CyberScoop.
Continue reading Zoom squashed a bug that left private meetings unprotected→