Cybersecurity researchers found a Zoom screen-sharing flaw that could let an attacker take full control of another participant’s device during a call, and Zoom has released fixes.
The vulnerability affected the Zoom Workspace app on Windows, Mac, iOS, Android and Linux. It existed in all versions before the latest updates.
The bug was tied to Zoom’s screen-sharing function. When the annotation tool was launched during screen sharing, an attacker could remotely execute malicious code and gain access to the target device.
The attacks did not require any action from the victim and produced no visible warning. The source material did not identify any confirmed real-world exploitation.
The cybersecurity company that discovered the flaw said researchers built a working exploit in less than 24 hours using AI prompts. The company said the result showed how AI could speed up the development of cyberattack tools.
“This class of capability would previously have only been available to nation-state threat actors, but the model requiring elite teams, months of effort and weapons-grade budgets has collapsed,” the company said in a blog post.
“Today, a single researcher was able to develop a nation-state-level exploit in less than a day,” it said.
Zoom said users should apply the latest updates to stay secure. The company had been notified of the bug before deploying fixes.
The report also pointed to a similar issue recently affecting Apple computers. Apple issued macOS updates, and the safe versions cited were Tahoe 26.6.1, Sequoia 15.7.9 and Sonoma 14.8.9.
Featured image credit
