Zoom patches critical unauthenticated privilege escalation in Workplace for Windows
CVE-2026-108186 (CVSS 9.6) affects 7.1.0 before 7.1.8; CVE-2026-108187 (CVSS 8.1) affects builds before 7.1.5.
Stories per day · 30 days
2 RSS
10 stories, newest first · one card per story
Stories tagged #zoom
macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor
Jamf says a fake Zoom macOS installer now deploys the CloudSyncD backdoor for persistent access.
2
Fake Zoom Installer Tricks Mac Users Into Installing New CloudSyncD Backdoor
A fake Zoom installer tricks Mac users into launching CloudSyncD, a new privileged backdoor.
CloudSyncD MacOS Backdoor Hides Behind Fake Zoom Installer
Jamf found CloudSyncD, a macOS backdoor in a fake Zoom installer that captures a password to launch its payload.
CloudSyncD Uses Invisible Unicode to Hide Phished Mac Passwords in Plain Sight
CloudSyncD, a fake Zoom macOS backdoor, hides phished passwords with invisible Unicode and calls live C2.
Google Beam expands with new regions, partners, and customers
Google Beam rolls out in six countries with HP hardware and Industrious access.
3
Linux Zoom Client Proactively Reads X11 Clipboard
Simon Tatham reports that Zoom's Linux client proactively reads the X11 clipboard, potentially exposing copied passwords and other sensitive data.
Researchers found a way to hijack devices through Zoom screen sharing
Researchers used a public AI tool to find a Zoom flaw enabling device hijacking via screen sharing in under 20 prompts.
Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client
A Security researchers disclosed three Zoom annotation flaws enabling zero-click client hijacking; Zoom shipped fixes in June and July with no exploitation reported.
1
Zoom Patches “Zoomsday” Zero-Click Flaw Enabling Remote Code Execution
Zoom patched CVE-2026-53413, a zero-click annotation flaw dubbed "Zoomsday" allowing remote code execution on meeting participants' devices across all platforms.
1