‘Zoomsday’ hack uncovered using fewer than 20 AI prompts

Researchers at A Security uncovered a critical Zoom vulnerability, dubbed 'Zoomsday,' using fewer than 20 prompts on publicly available AI models, which could let an attacker hijack any device during a meeting. Zoom has patched the flaw, which exploited the annotation feature to run malicious code, steal data, or activate cameras and microphones without user action.

‘Zoomsday’ hack uncovered using fewer than 20 AI prompts By Emma RothSource: The Verge AI https://www.theverge.com Zoom has patched https://www.zoom.com/en/trust/security-bulletin/zsb-26015/ a major security vulnerability that could allow an attacker to hijack anyone's device during a meeting. In a blog post on Tuesday https://a.security/blog/asecurity-zoomsday , researchers at A Security say they uncovered the flaw using "fewer than 20 prompts on publicly available AI models," as reported earlier by Wired https://www.wired.com/story/a-zoom-screen-sharing-bug-let-anyone-take-over-other-devices-on-a-call/ . The exploit involved Zoom's annotation feature https://support.zoom.com/hc/en/article?id=zm kb&sysparm article=KB0067931 , which allows users to draw on their screen while sharing it with other meeting participants. With the exploit, an attacker could join or host a meeting and run malicious code on victims' devices, allowing them to steal data, turn on the camera or microphone, or install malware. The attack required no act … Get AI news in your inbox Daily digest of what matters in AI.