Zoom: Critical Flaw Discovered with Fewer Than 20 AI Prompts
Le brief IA que les pros lisent chaque soir
Les 7 actus IA du jour, décryptées en 5 min. Gratuit.
Inclus dès l'inscription : notre sélection des meilleurs guides & comparatifs IA.
Choisis ton rythme
Gratuit · Pas de spam · Désabonnement en 1 clic
Zoom: A Critical Vulnerability Discovered with Fewer than 20 AI Prompts
A major vulnerability in Zoom has been patched, allowing an attacker to take control of any participant's device during a meeting. In a blog post published on Tuesday, researchers from A Security revealed that they discovered this flaw using "fewer than 20 prompts on publicly available AI models," as reported by Wired.
The exploitation of this vulnerability involved Zoom's annotation feature, which allows users to draw on their screen while sharing it with other participants. Through this vulnerability, an attacker could join or host a meeting and execute malicious code on the victims' devices, enabling them to steal data, activate the camera or microphone, or install malware. The attack required no action from the victims and showed "no visual indication of compromise," according to A Security.
Idan Levcovich, a vulnerability researcher at A Security, wrote in the blog: "Producing a functional exploit against this has always been the work of nation-states: elite teams, months of effort, budgets that governments regulate like weapons. A Security did it in a single day, with an AI agent and models accessible to everyone today."
Zoom released a patch for this vulnerability on Tuesday, which affected the application on Windows, macOS, Linux, Android, and iOS.
Brief IA — L'actualité IA en français
L'essentiel de l'actualité de l'intelligence artificielle, décrypté et expliqué chaque jour.