A flaw in Webex and Zoom let researchers snoop on users’ video calls

mood · Oct 1, 2019

A flaw in Webex and Zoom let researchers snoop on users’ video calls
October 1, 2019
https://techcrunch.com/2019/10/01/webex-zoom-bug-video-calls/

A team of security researchers found they could tap into Webex and Zoom video meetings because many weren’t protected with a code.

Researchers at Cequence, a startup focused on protecting applications from scraping and account takeovers, programmed a bot to cycle through lists of valid meeting IDs and get access to active conference calls. The vulnerability works because many companies and users don’t protect their meetings with a password [...]
By targeting the platforms’ APIs, they were able to automate the process.

The attack would not be silent, however: callers who successfully access a meeting are announced.
The researchers reported the flaws to both Cisco, which owns Webex, and Zoom in July. Both companies have since pushed out fixes.
Cisco said it was “not aware” of any malicious exploitation of the vulnerability on its platform. Zoom said it was “grateful” to the researchers, adding that it improved its server protections to prevent bot attacks.
Click to expand...

Cequence: Prying-Eye Vulnerability: Direct-to-API Enumeration Attack Enables Snooping

Log in or Sign up

A flaw in Webex and Zoom let researchers snoop on users’ video calls

mood Updates Team

New Bluetooth KNOB Flaw Lets Attackers Manipulate Connections

Your Mac could be hijacked through major security flaw in Zoom conferencing app

Samsung Smart Home flaws let hackers make keys to front door

BlueStacks Flaw Lets Attackers Remotely Control Android Emulator

Irked Researcher Discloses Facebook WordPress Plugin Flaws

Log in or Sign up

A flaw in Webex and Zoom let researchers snoop on users’ video calls

mood Updates Team

New Bluetooth KNOB Flaw Lets Attackers Manipulate Connections

Your Mac could be hijacked through major security flaw in Zoom conferencing app

Samsung Smart Home flaws let hackers make keys to front door

BlueStacks Flaw Lets Attackers Remotely Control Android Emulator

Irked Researcher Discloses Facebook WordPress Plugin Flaws

Useful Searches