Researchers Find Way to Hijack Zoom Devices Via Screen Sharing

Researchers from digital defense firm A Security have disclosed new vulnerabilities in Zoom's video conferencing platform. The discovered flaws could allow attackers to take over targets' devices through screen sharing, executing a silent attack with no indication or interaction required from the victim.

The vulnerabilities were found in early June using publicly available AI models, requiring fewer than 20 prompts to identify and create a working exploit, according to A Security. Zoom has issued a security advisory, detailing fixes that the company has begun rolling out. The flaws affected devices running all supported operating systems, including Windows, macOS, Linux, iOS, and Android.

"What is interesting for us and what we believe is dangerous is the democratization of these capabilities—the barrier to entry is dropping rapidly," said Omer Gull, A Security cofounder. He noted that what previously might have taken a team six months to discover can now be achieved with significantly fewer prompts.

Platforms like Zoom are considered attractive targets due to the inherent trust users place in them. The ease with which these vulnerabilities can now be exploited raises concerns about cybersecurity, especially as remote work continues to be prevalent.