Zoom bug allowed anyone to use a company’s custom meeting URL

Zoom bug allowed anyone to use a company’s custom meeting URL

Cybersecurity professionals are still finding some big problems with Zoom.

On Thursday, researchers at online security firm Check Point detailed their latest discovery: an exploit in Zoom which would have allowed any bad actor to use a company’s vanity URL for their own video meeting.

Here’s what this means. Basically, companies and organizations paying Zoom for video conferencing services can set up a unique vanity subdomain to brand their meetings right in the Zoom domain name. For example, a company can set up its video meetings to live on the URL https://YourCompany.zoom.us/meetingID. 

This bug allowed anyone to setup their own Zoom meeting and add any subdomain registered with Zoom. Let’s say McDonald’s used a mcdonalds.zoom.us custom subdomain for its meetings. Anyone could have started their own meeting, add the “mcdonalds” subdomain to their own personal Zoom meeting link and the link would have worked. That URL would have led users who clicked it to the bad actor’s personal Zoom meeting. Read more…

More about Cybersecurity, Zoom, Exploit, Url, and Video Conferencing

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Next Post

6 easy ways to live more sustainably (that you still refuse to do)

We all claim to love the planet, but do we really? It’s easy to love something when it’s lavishing you with refreshing hikes, clear lakes, and gorgeously glowing sunsets. It’s much harder when the object of your affections asks for something in return — such as your toilet paper. It […]

Subscribe US Now