Zoom Client Leaks Windows Login

[Asyn]

Is Zoom secure enough for my happy hour?
https://blog.avast.com/security-tips-for-zoom-social-hours-avast

[polonus]

It is not only Google to ban Zoom, also governments like Taiwan, Germany and American senators:
https://www.ft.com/content/dac7d60b-54fa-402b-8469-70f85aaace76

Encryption keys of non-Chinese user have been sent to Chinese servers. Do we want that?
Using Chinese made devices you do that everyday, remember.

My only hope is that China stays part of our Globe and they will send us loads of good "chi".

polonus

[bob3160]

It is not only Google to ban Zoom, also governments like Taiwan, Germany and American senators:
https://www.ft.com/content/dac7d60b-54fa-402b-8469-70f85aaace76

Encryption keys of non-Chinese user have been sent to Chinese servers. Do we want that?
Using Chinese made devices you do that everyday, remember.

My only hope is that China stays part of our Globe and they will send us loads of good "chi".

polonus

To read the article, you need to sign up. Not about to happen any time soon.

[Asyn]

Over 500,000 Zoom accounts sold on hacker forums, the dark web
https://www.bleepingcomputer.com/news/security/over-500-000-zoom-accounts-sold-on-hacker-forums-the-dark-web/

[bob3160]

Why do we have so many topics with the same information?
It makes replying extremely difficult and confusing.

[SpeedyPC]

Why do we have so many topics with the same information?
It makes replying extremely difficult and confusing.

P.E.B.K.A.C!!!! 

[Pondus]

Zoomed In: A Look into a Coinminer Bundled with Zoom Installer
https://blog.trendmicro.com/trendlabs-security-intelligence/zoomed-in-a-look-into-a-coinminer-bundled-with-zoom-installer/

[bob3160]

Zoomed In: A Look into a Coinminer Bundled with Zoom Installer
https://blog.trendmicro.com/trendlabs-security-intelligence/zoomed-in-a-look-into-a-coinminer-bundled-with-zoom-installer/

Old news and easily avoidable by downloading the product from the source instead of third party sites.

[Asyn]

Hackers Are Selling a Critical Zoom Zero-Day Exploit for $500,000
https://www.vice.com/en_us/article/qjdqgv/hackers-selling-critical-zoom-zero-day-exploit-for-500000

[bob3160]

Hackers Are Selling a Critical Zoom Zero-Day Exploit for $500,000
https://www.vice.com/en_us/article/qjdqgv/hackers-selling-critical-zoom-zero-day-exploit-for-500000

Sorry Asyn but I hate these one liners. Headlines are always designed to peak your interest and never give a true picture.
“Zoom takes user security extremely seriously. Since learning of these rumors, we have been working around the clock with a reputable,
industry-leading security firm to investigate them,” the company said in a statement. “To date, we have not found any evidence substantiating these claims.”

[Asyn]

Zoom Endpoint-Security Considerations
https://dev.io/posts/zoomzoo/

[Q-Dawg]

SO I had read this previously, but someone had linked this when I asked a related questions elsewhere.

I am working for an organisation that uses Zoom extensively for meetings with people exterior to our organisation. We had just been given the notification to update to their latest 5.0 version with their new security features installed and when I went to do that, I got a notification that this was a PHISHING threat, but none of my coworkers got it. Now, my coworkers are likely using Malwarebytes and I am using Avast on my home PC, but I wondered if anyone could talk me through what to do here like I am a five year old?

[DavidR]

SO I had read this previously, but someone had linked this when I asked a related questions elsewhere.

I am working for an organisation that uses Zoom extensively for meetings with people exterior to our organisation. We had just been given the notification to update to their latest 5.0 version with their new security features installed and when I went to do that, I got a notification that this was a PHISHING threat, but none of my coworkers got it. Now, my coworkers are likely using Malwarebytes and I am using Avast on my home PC, but I wondered if anyone could talk me through what to do here like I am a five year old?

An attached avast alert screenshot and or the location (or how you got there) you downloaded it from might have helped.  The (URL) PHISHING is normally site based rather than file based.

I just downloaded the Zoom Client (though I don't use it) ZoomInstaller.exe Version 5.0.1 (23502.0430) from the zoom.us/download location (that however does redirect to another location, see attached image, click to expand) and no alerts. 

So as you can see what you download and from where is important.

[polonus]

Again USA warns against the use of Zoom, because of APT-attacks:
https://publicintelligence.net/dhs-zoom-threats/

pol

[bob3160]

Again USA warns against the use of Zoom, because of APT-attacks:
https://publicintelligence.net/dhs-zoom-threats/

pol

This looks like it describes old vulnerabilities that were address
by ZOOM in the update released on May 3.