Stories
Slash Boxes
Comments

SoylentNews is people

SoylentNews is powered by your submissions, so send in your scoop. Only 11 submissions in the queue.

Submission Preview

Link to Story

Breaking: Zoom.us activates your mic and cam without questions

Accepted submission by pkrasimirov at 2019-07-10 09:44:47 from the Now-you-see-me-now-you-still-do dept.
Security

pkrasimirov [soylentnews.org] writes:

https://medium.com/bugbountywriteup/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5 [medium.com]

Proof of concept:
https://jlleitschuh.org/zoom_vulnerability_poc/zoompwn_iframe.html [jlleitschuh.org]
WARNING: Clicking this link starts a Zoom video call, no questions asked!

Original Submission