Zoom fixes screen-sharing flaw that allowed silent device takeover

AI digestMimile.ai EditorialAugust 11, 2026 at 05:37 PM

This digest was compiled by AI from multiple sources — links to the originals are below.

Zoom fixes screen-sharing flaw that allowed silent device takeover

Zoom has patched a vulnerability in its screen-sharing protocol that could let attackers hijack devices on calls without any user interaction. Researchers from A Security discovered the flaw using publicly available AI models in fewer than 20 prompts. The bug affected all platforms that Zoom supports, including Windows, macOS, Linux, iOS, and Android.

The Vulnerability

The flaw resided in the protocol for real-time annotation during screen sharing. Anyone on a call, whether host or participant, could have been silently attacked with no indication. All Zoom-supported operating systems were affected, including Windows, macOS, Linux, iOS, and Android. A Security's AI bug-hunting systems targeted this component because obscure, convoluted functions in proprietary software often conceal overlooked mistakes.

AI Bug Hunting

The vulnerability was discovered in early June using publicly available AI models. A Security cofounder Omer Gull said it took fewer than 20 prompts to create a working exploit. Previously, such a find might have required a five-person team and six months of refinement. Gull warned that the democratization of these capabilities is rapidly lowering the barrier to entry, making trusted platforms like Zoom attractive targets as users lower their guard.

Zoom's Response

Zoom issued a security advisory on Tuesday detailing the bug and its fixes. Both server-side and client-side patches have been rolled out. The company did not respond to WIRED's multiple requests for comment on the A Security findings. While the vulnerabilities are now mitigated, the incident illustrates the risk that any participant on a Zoom call could potentially be a vector for device takeover.

What's Next

A Security cautions that similar vulnerabilities may exist in other widely trusted platforms. It remains uncertain whether AI-driven bug hunting will lead to a flood of discovered threats or a more resilient software ecosystem.

3 sources

Zoom fixes screen-sharing flaw that allowed silent device takeover

wired.com

Wired

theverge.com

The Verge

engadget.com

Engadget

Technology

Zoom patches critical account takeover vulnerability

Zoom patched a critical security flaw that could allow an unauthenticated attacker to take over accounts via network access. The bug affects Windows clients and was disclosed alongside three privilege escalation issues. No active exploitation has been reported, according to IDC.

Technology

tl;dv AI notetaker vulnerability exposes government and corporate video calls to any user

A vulnerability in AI meeting assistant tl;dv — used by over two million users including Salesforce, Forbes, and dozens of government agencies — allows any user to access meeting metadata and join live video calls, a security researcher has found. Researcher BobDaHacker discovered in January that any logged-in user can query tl;dv’s Google Firestore database to obtain timestamps, creator emails, and join video conferences of other users. The flaw remains unpatched, and tl;dv has not responded to attempted disclosures by the researcher or Dark Reading.

Technology

UC San Diego Researchers Hack Boeing 737 Autopilot With $100 Device

Researchers at the University of California San Diego and Oberlin College have developed a coin-sized device costing less than $100 that can be installed in a Boeing 737's exterior hatch in under 60 seconds. The implant then sends spurious signals on the plane's internal network to alter autopilot navigation and takeoff calculations while displaying false values to pilots. The team will present the technique Thursday at the Usenix security conference.

Technology

NTU's iFinder finds 84 flaws in 5G network software, 23 still unfixed

Researchers at Nanyang Technological University used an AI tool called iFinder to uncover 84 previously unreported security flaws in 4G and 5G network software, with 23 still lacking fixes. The most severe flaw allows an attacker to hijack a subscriber's data session and redirect traffic. The findings underscore risks as operators migrate network cores to cloud environments.

Zoom fixes screen-sharing flaw that allowed silent device takeover

The Vulnerability

AI Bug Hunting

Zoom's Response

What's Next

Read more

Read more