Security News

Warning! Fake Zoom “HR meeting” emails phish for your password
2020-04-28 08:30

Example CEO and Management Board Meeting for all staffs on Zoom Meeting This is a reminder that your zoom meeting appointment with H.R and Audit Head will start in few minutes. Your presence is crucial to this meeting and equally required to commence this Q1 perfomance review meeting Join this Live Meeting Meeting Purpose: Contract Suspension / Termination Trial.

Obsidian Security lets security teams monitor Zoom usage
2020-04-27 14:23

Obsidian Security announced protection for Zoom, enabling organizations to safely embrace the leading video communications service as a business-critical application. "Board meetings, medical appointments, and critical customer calls are all occurring over Zoom. Security teams are grappling with how to prevent account misuse and ensure that only the right people are in these meetings," said Glenn Chisholm, CEO of Obsidian.

Week in review: Web shell malware, client-side web security, phishers exploit Zoom and WebEx
2020-04-26 08:55

Web shell malware continues to evade many security toolsCyber attackers are increasingly leveraging web shell malware to get persistent access to compromised networks, the US National Security Agency and the Australian Signals Directorate warn. Phishers exploit Zoom, Webex brands to target businessesProofpoint researchers have spotted and documented email phishing campaigns targeting US companies in a variety of industries with emails impersonating Zoom and Cisco.

Zoom Announces Better Encryption, Other Security Improvements
2020-04-23 12:22

Zoom on Wednesday announced a series of security improvements designed to address many of the concerns raised in recent weeks. Zoom has now announced that account administrators will be able to choose which data center regions they want to use for real-time meeting traffic.

After intense scrutiny, Zoom tightens up security with version 5. New features include not, er, spilling video calls to network snoops
2020-04-22 20:54

Zoom's ongoing game of whack-a-mole with security bugs in its code continued today with the imminent emission of version 5, replete with support for 256-bit AES-GCM encryption. As hundreds of millions of netizens, forced to stay home and work remotely if possible amid the coronavirus pandemic, flocked to Zoom's chat products, its code fell under intense scrutiny.

Zoom 5.0 is coming, with improved security features: Here's what's new
2020-04-22 16:53

Zoom 5.0 is due to be launched within a week, bringing 256-bit encryption and new features for helping hosts stay in control of their meetings and their data. Zoom has announced a slew of security enhancements in the upcoming launch of Zoom 5.0, due to be released within the week.

Flaw Could Have Allowed Hackers to Identify All Zoom Users in a Company
2020-04-22 12:21

A vulnerability in Zoom's video conferencing service could have been abused to enumerate all of the registered Zoom users within an organization, Cisco Talos reports. Zoom has drawn a lot of attention over the past several weeks, especially since many organizations have asked employees to work from home during the current COVID-19 pandemic, and, for many, Zoom has become the main option for internal communication.

Zoom is introducing this new feature in its bid to banish Zoom bombing
2020-04-22 11:45

Zoom is introducing a new feature that will let users report meeting participants in a move to deter gatecrashers. The video-conferencing company is introducing a dedicated 'report user to Zoom' button in an upcoming update as it looks to put an end to the troublesome trend of 'Zoom bombing', which has left the company in hot water in recent weeks.

Phishers exploit Zoom, WebEx brands to target businesses
2020-04-21 04:00

Proofpoint researchers have spotted and documented email phishing campaigns targeting US companies in a variety of industries with emails impersonating Zoom and Cisco. "Not only are attackers using video conferencing brands as a lure for malware, but they're using it for credential phishing, in particular to steal Zoom and Webex credentials."

Week in review: Cloud migration and cybersecurity, data trending on the dark web, Zoom security
2020-04-19 08:45

What type of data is trending on the dark web?Fraud guides accounted for nearly half of the data being sold on the dark web, followed by personal data at 15.6%, according to Terbium Labs. Will Zoom manage to retain security-conscious customers?While Zoom Video Communications is trying to change the public's rightful perception that, at least until a few weeks ago, Zoom security and privacy were low on their list of priorities, some users are already abandoning the ship.