Zoom patches ‘Zoomsday’ flaw that let attackers hijack every device

👁 113 reads

Zoom has patched a critical security vulnerability that researchers discovered using publicly available AI models in just a single day. The flaw, nicknamed “Zoomsday,” could have allowed attackers to take complete control of every device participating in a Zoom call across all major platforms including Windows, macOS, Linux, Android and iOS. What makes this discovery particularly significant is that the exploit was found using fewer than 20 prompts on AI models that anyone can access, demonstrating how artificial intelligence is dramatically changing the cybersecurity landscape.

What Was the Zoomsday Vulnerability

The vulnerability was a remote-code-execution flaw, which is one of the most serious types of security issues. It targeted Zoom’s annotation feature, a commonly used tool that allows meeting participants to draw, highlight, or write over shared screens during presentations and collaborative sessions. An attacker could exploit this feature by simply joining or hosting a Zoom call. Once in the meeting, they could use the flaw to execute malicious code on every other participant’s device simultaneously. According to researchers at A Security who discovered the issue, there was no visual cue indicating the compromise, meaning victims would have no way of knowing their devices had been taken over. The attacker could steal sensitive data, activate cameras or microphones to spy on users, or install malware for long-term access, all without requiring any action from the victims.

How AI Changed Vulnerability Discovery

What sets this discovery apart from typical security research is the method used to find it. Researchers at A Security uncovered the vulnerability using fewer than 20 prompts on publicly available AI models. Idan Levcovich, a vulnerability researcher at the firm, emphasized the significance of this achievement by noting that producing a working exploit against such a vulnerability has traditionally been nation-state work, requiring elite teams, months of effort, and budgets that governments regulate as weapons. A Security accomplished this in a single day with an AI agent and models anyone can access today. This represents a fundamental shift in cybersecurity, as The Verge reported when covering the Zoomsday flaw. The barrier to discovering critical vulnerabilities has been dramatically lowered, which has implications for both security defenders who can find and patch flaws faster, and potential attackers who now have more powerful tools at their disposal.

What This Means for Zoom Users

Zoom patched the vulnerability on Tuesday, and users should ensure their Zoom applications are updated to the latest version to protect against this threat. The good news is that the flaw was discovered by security researchers and reported responsibly to Zoom before any known exploitation in the wild. However, this incident highlights the importance of keeping video conferencing software updated, as these platforms have become critical infrastructure for remote work, education, and communication. The fact that every participant in a call could be compromised simultaneously through a commonly used feature like annotations underscores the potential scale of damage from such vulnerabilities. Organizations and individuals who rely on Zoom should review their security practices and ensure automatic updates are enabled where possible.

Frequently Asked Questions

Which devices were affected by the Zoomsday vulnerability?

The Zoomsday flaw affected Zoom across all major platforms including Windows, macOS, Linux, Android and iOS, meaning virtually every device that could run Zoom was potentially vulnerable.

How did attackers exploit the vulnerability?

An attacker could exploit the flaw by joining or hosting a Zoom call and using the annotation feature to run malicious code on every other participant’s device, with no action required from victims and no visual cue indicating the compromise.

How long did it take researchers to discover this vulnerability using AI?

Researchers at A Security discovered the vulnerability in a single day using fewer than 20 prompts on publicly available AI models, work that previously would have required nation-state resources, elite teams, and months of effort.

// read moreHiggsfield AI Earth Zoom Out: Prompts, Steps and CostGuidesClaude and European Groups: One Attacker, Multiple TargetsState of AIEvilTokens: How AI Helped Hijack Over 12,000 MailboxesState of AI

Kinetyra