July 10, 2019 By Shane Schick 2 min read

A zero-day Zoom vulnerability could allow third parties to snoop on videoconferencing calls, reactivate uninstalled apps and conduct other malicious activities.

Details of the problem were initially disclosed in a blog post by independent security researcher Jonathan Leitschuh. An issue in the product’s architecture involving a localhost web server means a third party could potentially join a videoconferencing call without permission. Even if the client is removed, it can be automatically reinstalled just by visiting a webpage.

So far, there have been no reports of threat actors exploiting the Zoom vulnerability, but it could affect the firm’s millions of users unless they update their settings to deactivate the webcam by default.

How the Zoom Vulnerability Emerged

Leitschuh said he had reported his findings to Zoom back in March with a proposed quick-fix solution, but the company did not implement it until late last month. Security best practices generally recommend public disclosure of major threats or vulnerabilities within a 90-day period, and the blog post suggested the company had not acted in a timely manner to protect its customers.

A Zoom spokesperson told Forbes, however, that it had begun analyzing the problem within 10 minutes of learning about it, and that the ability to have one-click access to join videoconferencing calls was intended to address poor user experiences for those running Apple’s Safari 12 web browser.

In a more detailed public statement, Zoom said admins and users will be able to turn off video if they configure their client video settings, and that preferences from their first Zoom meeting will be saved once they apply its July update. The company also plans to release an uninstaller app that will allow customers to more easily delete both the Zoom local web server and its Zoom client rather than forcing them to do so manually.

Don’t Be Surprised by Zero-Days

The challenge with something like this Zoom vulnerability is that users might simply be unaware of any danger. As patches and other solutions become available, the biggest question they’re likely to ask is, “Am I affected?”

It’s best to be proactive in answering that question by connecting directly to watchlists and receiving notifications of any malicious indicators, according to IBM experts. This can be done automatically by using intelligent security analytics tools that have such features built in.

More from

How to craft a comprehensive data cleanliness policy

3 min read - Practicing good data hygiene is critical for today’s businesses. With everything from operational efficiency to cybersecurity readiness relying on the integrity of stored data, having confidence in your organization’s data cleanliness policy is essential.But what does this involve, and how can you ensure your data cleanliness policy checks the right boxes? Luckily, there are practical steps you can follow to ensure data accuracy while mitigating the security and compliance risks that come with poor data hygiene.Understanding the 6 dimensions of…

2024 roundup: Top data breach stories and industry trends

3 min read - With 2025 on the horizon, it’s important to reflect on the developments and various setbacks that happened in cybersecurity this past year. While there have been many improvements in security technologies and growing awareness of emerging cybersecurity threats, 2024 was also a hard reminder that the ongoing fight against cyber criminals is far from over.We've summarized this past year's top five data breach stories and industry trends, with key takeaways from each that organizations should note going into the following…

Black Friday chaos: The return of Gozi malware

4 min read - On November 29th, 2024, Black Friday, shoppers flooded online stores to grab the best deals of the year. But while consumers were busy filling their carts, cyber criminals were also seizing the opportunity to exploit the shopping frenzy. Our system detected a significant surge in Gozi malware activity, targeting financial institutions across North America. The Black Friday connection Black Friday creates an ideal environment for cyber criminals to thrive. The combination of skyrocketing transaction volumes, a surge in online activity…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today