Security News > 2020 > April > Zoom vows to spend next 90 days thinking hard about its security and privacy after rough week, meeting ID war-dialing tool emerges

Video-conferencing app maker Zoom has promised to do better at security after a bruising week in which it was found to be unpleasantly leaky in several ways.

Host a weekly webinar on Wednesdays at 10am PT to provide privacy and security updates to our community.

Last year, Check Point documented how it was easy to brute-force guess Zoom meeting ID numbers, which could be used to gatecrash non-password-protected conferences.

In response, Zoom made creating a password a default setting, thwarting ID brute-forcing.

That someone is Trent Lo, a security professional and co-founder of Kansas City security meetup SecKC. "Lo and fellow SecKC members recently created zWarDial, which borrows part of its name from the old phone-based war dialing programs that called random or sequential numbers in a given telephone number prefix to search for computer modems," Krebs explained.

News URL

https://go.theregister.co.uk/feed/www.theregister.co.uk/2020/04/03/zoom_security_improvements/