Zoom,un sex video in car the videoconferencing software that's skyrocketed in popularity as much of the globe sits at home due to the coronavirus outbreak, is quickly turning into a privacy and security nightmare.
BleepingComputer reports about a newly found vulnerability in Zoom that allows an attacker to steal Windows login credentials from other users. The problem lies with the way Zoom's chat handles links, as it converts Windows networking UNC (Universal Naming Convention) paths into clickable links. If a user clicks on such a link, Windows will leak the user's Windows login name and password.
The good thing is that the password is hashed; but the bad thing is that it is in many cases simple to reveal it using password recovery tools such as Hashcat.
The vulnerability was first found by security researcher @_g0dmode and verified by security researcher Matthew Hickey. Additionally, Hickey told the news outlet that this vulnerability can be used to launch programs on a victim's computer when they click on a link, though Windows will (by default) at least give a security warning before launching the program.
As far as security vulnerabilities go, this one is pretty bad, as it doesn't require a lot of knowledge to exploit. It does require the victim to actually click on a link, and it can be mitigated by tinkering with Windows' security settings, but it's definitely something Zoom should fix by changing the way the platform's chat handles UNC links.
In the meantime, for a quick fix, go to Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers and set to "Deny all".
Mashable has contacted Zoom for comment on this story, and we'll update it when we hear back.
SEE ALSO: Zoom's iOS app no longer sends data to FacebookThis is not the only privacy/security-related issue that has been unearthed at Zoom in the past couple of weeks. Just yesterday, The Intercept reported that Zoom doesn't actually use an end-to-end encrypted connection for its calls, despite claiming to do so. There's also the issue of leaking users' emails and photos to unrelated parties, and the fact that the company's iOS app, until recently, sent data to Facebook for no good reason.
Zoom software also has a couple of worrying privacy features, and although this isn't Zoom's fault, it's worth noting that hackers are using the app's newfound popularity to trick users into downloading malware.
Topics Cybersecurity
Brown Appoints Carin Fujisaki as Associate Justice on Court of Appeal
Amazon will reportedly lay off 10,000 employees
The U.S. Department of Justice wants Binance to share why it walked away from FTX acquisition
'Black Panther: Wakanda Forever' mid
Change Your Waribashi, Change the World
Dating trends to expect in 2023, according to Bumble
Disney donates $1 million to STEM nonprofits for 'Wakanda Forever' release
Airbnb freshens up home categories and adds host setup tools
Trump Urged to Nominate Ambassador to South Korea
How to stay protected during the busiest shopping period of the year
Manzanar National Historic Site Closed During Government Shutdown
DuckDuckGo adds App Tracking Protection for all Android users
'Quordle' today: See each 'Quordle' answer and hints for November 12
'Sonic Frontiers' isn't super colorblind
2018 Women of the Year to Be Honored
How to stay protected during the busiest shopping period of the year
Netflix's 'Run for the Money' is straight out of a Stephen King book
Discord voice chat rolls out to all Xbox users
‘Stories of Displacement’ at JANM
Mismatched kinkiness: How to talk about kink with your vanilla partner
27 Years of Tomb Raider & Lara CroftComputer Tips & Tricks Everyone Should KnowChina’s BYD, Geely offer big incentives in latest price war move · TechNodeXiaomi unveils selfStarbucks’ China rival Luckin Coffee to open first US store in New York City · TechNodeCall of Duty: Warzone 2.0 CPU and GPU BenchmarkScientists film footage of alien, shimmering creature in the remote oceanMoon phase today explained: What the moon will look like on June 23, 2025How Hot is Too Hot for PC Hardware?Computer Tips & Tricks Everyone Should Know I have the Ray Bumble for Friends rolls out AI This viral iPhone 12 wedding dress pic creeped out the internet 18 AI products to boost your productivity in 2024 Threads won't be getting chronological search results NYT's The Mini crossword answers for December 2 Xbox is working on a mobile app store to compete with Apple and Google Google Pixel Watch 2 deal: Save $50 on WiFi and cellular models NYT's The Mini crossword answers for December 3 Governments can spy via smartphone push notifications, Apple and Google confirm
0.1463s , 10305.9375 kb
Copyright © 2025 Powered by 【un sex video in car】Enter to watch online.Zoom security bug lets attackers steal Windows passwords,Global Perspective Monitoring
