Zoom Client Leaks Windows Login

[DavidR]

Again USA warns against the use of Zoom, because of APT-attacks:
https://publicintelligence.net/dhs-zoom-threats/

pol

This looks like it describes old vulnerabilities that were address
by ZOOM in the update released on May 3.

Looks like they are behind the curve again.  I always get concerned by terms/domains like this Public Intelligence, often it is neither.

Mainly when this news (!) comes from an article that predates the latest Zoom update as you mention.
- "The following document was obtained from the public website of a local government." - and the document is dated April 27, 2020.

[bob3160]

New York City schools have just reversed their position on using ZOOM.
https://www.businessinsider.com/new-york-city-schools-reverse-zoom-ban-online-learning-2020-5

[bob3160]

More Security improvements for ZOOM
https://blog.zoom.us/wordpress/2020/05/07/zoom-acquires-keybase-and-announces-goal-of-developing-the-most-broadly-used-enterprise-end-to-end-encryption-offering/

[Asyn]

Vulnerability Spotlight: Two vulnerabilities in Zoom could lead to code execution
https://blog.talosintelligence.com/2020/06/vuln-spotlight-zoom-code-execution-june-2020.html

[bob3160]

Vulnerability Spotlight: Two vulnerabilities in Zoom could lead to code execution
https://blog.talosintelligence.com/2020/06/vuln-spotlight-zoom-code-execution-june-2020.html

The fix is already available. Simply update.

[Asyn]

End-to-End Encryption Update
https://blog.zoom.us/wordpress/2020/06/17/end-to-end-encryption-update/

[Asyn]

Fixing the Zoom ‘Vanity Clause’ – Check Point and Zoom collaborate to fix Vanity URL issue
https://blog.checkpoint.com/2020/07/16/fixing-the-zoom-vanity-clause-check-point-and-zoom-collaborate-to-fix-vanity-url-issue/

[bob3160]

Fixing the Zoom ‘Vanity Clause’ – Check Point and Zoom collaborate to fix Vanity URL issue
https://blog.checkpoint.com/2020/07/16/fixing-the-zoom-vanity-clause-check-point-and-zoom-collaborate-to-fix-vanity-url-issue/

How old is this article? I see no date related to the 'vulnerability they describe?

[DavidR]

Fixing the Zoom ‘Vanity Clause’ – Check Point and Zoom collaborate to fix Vanity URL issue
https://blog.checkpoint.com/2020/07/16/fixing-the-zoom-vanity-clause-check-point-and-zoom-collaborate-to-fix-vanity-url-issue/

How old is this article? I see no date related to the 'vulnerability they describe?

Given there appears to be a report/article date incorporated in the URL, 2020/07/16/, I would assume that the vulnerability is earlier than that date.

[bob3160]

Fixing the Zoom ‘Vanity Clause’ – Check Point and Zoom collaborate to fix Vanity URL issue
https://blog.checkpoint.com/2020/07/16/fixing-the-zoom-vanity-clause-check-point-and-zoom-collaborate-to-fix-vanity-url-issue/

How old is this article? I see no date related to the 'vulnerability they describe?

Given there appears to be a report/article date incorporated in the URL, 2020/07/16/, I would assume that the vulnerability is earlier than that date.

My point exactly.

[Charyb-0]

I closed my Zoom account a few days ago. I also closed eBay, PayPal, Fitbit, TikTok, and some others. I'm trying to gain control of accounts that have banking and personal information and I created a new email address for the rest. It's gotten out of control for me. My fault though.

[bob3160]

I closed my Zoom account a few days ago. I also closed eBay, PayPal, Fitbit, TikTok, and some others. I'm trying to gain control of accounts that have banking and personal information and I created a new email address for the rest. It's gotten out of control for me. My fault though.

TikTok makes sense. all others are personal choices.

[Rednose]

I didn't read the whole topic, but use Jitsi instead https://jitsi.org/

Greetz, Red.

[bob3160]

I didn't read the whole topic, but use Jitsi instead https://jitsi.org/

Greetz, Red.

How is that related to the topic? The questions raised were in regards to ZOOM.

[Rednose]

Hi Bob, how are you ?

I was just mentioning a ( smart ) alternative.

Greetz, Red.