Four Zoom Workplace vulnerabilities, including privilege escalation and certificate flaws rated up to CVSS 8.1, are now fixed. Update to 7.2.0 or later.
Zoom
Zoom vulnerability CVE-2026-53412 (CVSS 9.8) allows unauthenticated account takeover over the network. Update Zoom Workplace for Windows to 7.0.0 now.
Microsoft Teams for Android is adding native SIP support. Connect Zoom, WebEx, and Teams directly without installing extra apps. Full rollout starts June 2026.
Zoom's new Custom AI Companion ($12/month) brings agent-like AI to 16 business apps like ServiceNow, Jira, & Asana, offering real-time meeting summaries & task orchestration to boost productivity.
Zoom rolls out security updates for 6 newly disclosed flaws in Workplace, Rooms, and SDK, addressing DoS, info disclosure, and XSS across all platforms. Update now!
North Korean APT BlueNoroff (TA444) exploited deepfakes in Zoom calls to trick a crypto foundation employee into installing custom macOS malware for digital asset theft.
Zoom fixes critical CVE-2025-30663 flaw allowing local privilege escalation. Users urged to update Workplace apps and SDKs to version 6.4.0 or newer.
A major Zoom outage occurred due to a domain registry error at GoDaddy. Learn about the cause and the risk of self-hosted status pages.
Zoom Communications, Inc. has recently released security advisories addressing multiple vulnerabilities affecting various Workplace Apps and Meeting SDKs
Protect your sensitive information from disclosure and mitigate potential risks with the latest Zoom updates. Read about CVE-2025-0147 and other vulnerabilities.
Beware of a sophisticated Zoom phishing campaign targeting cryptocurrency users. Learn how attackers exploit trust to steal sensitive data.
Uncover the cyberattack orchestrated by Marko Polo. Learn how this hacker group targets gamers, cryptocurrency influencers, and IT professionals.
Discover a new phishing scam involving ScreenConnect and Zoom. Learn how cybercriminals gain unauthorized access to victims' computers.
Among the most critical are CVE-2024-39825 and CVE-2024-39818, both with a CVSS score of 8.5, indicating a high level of severity
CVE-2024-24691 (CVSS score 9.6) could allow hackers to escalate their privileges, potentially gaining control of vulnerable systems
CVE-2023-49647 could be exploited to gain elevated rights, posing a serious threat to the confidentiality and integrity of Zoom sessions and user data
These actors have been utilizing the ms-appinstaller protocol handler as a vector for malware, potentially leading to ransomware distribution
Zoom has released security updates to fix three vulnerabilities that could allow attackers to take control of a user's account or system.
One of the most serious bugs, CVE-2023-39216, allows an unauthenticated attacker to enable an escalation of privilege via network access
recent revelations highlight some vulnerabilities in the system that have been silent undercurrents, threatening to unseat us from our boards
CVE-2023-34120 could provide an authenticated user the capability to enable escalation of privilege through local access