Zoom has another security flaw

Zoom is a web-based application that allows multiple people to log into an online conference. Once logged in, those in the meeting can see and hear one another and also send documents and graphics back and forth-just as they might in a face-to-face meeting. Unfortunately, the application has been beset with security issues, including hackers breaking into meetings to create disruptions. Now, it appears the application has another more serious security problem-it allows hackers to steal Microsoft Windows passwords, which can be used to access programs and data on computers and network servers.

The vulnerability involves users clicking on a link that has been shared in a chat by someone who has joined a meeting. Clicking on it sends the user's credentials to the person who sent the link-that person can then use information in the credentials to access the user's computer-security researcher Matthew Hickey has announced on his Twitter feed that the hack can also be used to launch programs installed on a victim's computer. More specifically, when a user clicks on the link, Windows makes an attempt to connect to a remote site using the SMB file sharing protocol and open a file specified in the link. Such an attack is known as a UNC path injection, and it works for hackers because Windows does not hide a user's login name and password when they attempt to access a remote server. The password is encrypted, but as several Twitter users have pointed out, it can be easily cracked using available third-party tools.

Engineers at Zoom are reportedly working on a fix for the vulnerability, even as officials with the company have noted that users can close the vulnerability by making changes to their Windows settings-by turning off automatic transmission of NTML credentials to a remote server.

Website search

Recently updated

ACT Key Crack Plus Keygen ACT Key Crack & Activation Code Recover passwords for ACT! files
OneNote Password Recovery Key Crack + Activator Download 2020 OneNote Password Recovery Key Crack + Serial Number A password recovery tool that is designed to retrieve passphrases for MS OneNote files by using a combination of various attacks
P2 Commander Crack + Activator Download P2 Commander Crack With License Key 2020 A reliable and effective solution that helps you to perform comprehensive digital forensic examinations and deleted data recovery

Software News

May 25
Today sees the start of the pilot phase for the long-awaited tracing app jointly developed by teams at ETH Zurich and EPF Lausanne on behalf of the federal government. Switzerland is the first country in the world to use ...
May 25
Current trends in the field of big data analytics in the context of smart cities show a need for original software ecosystems upon which advanced mobility functionalities can be developed. These new architectures need to ...
May 25
Privacy concerns over Qatar's coronavirus contact tracing app, a tool that is mandatory on pain of prison, have prompted a rare backlash and forced officials to offer reassurance and concessions.
May 24
Digital or manual? Bluetooth or GPS? Centralized or decentralized?
May 21
Mark July 17 on your calendars because it's going to be busy. It will feel a little like Christmas in the summer with two big titles scheduled for release on that day.
May 20
Norwegian tech experts said Wednesday that a government app released to help trace the spread of the new coronavirus in the country, did not sufficiently protect personal "privacy."
May 20
France, which has long been sceptical of the growing power of US tech titans, is seeking to bypass Apple and Google for a smartphone app to help trace people infected with the novel coronavirus.

About us

Welcome to new crack resource CrackDownloadz.com! Our service can generate cracks, keygens and serials for your software to unlock it. CrackDownloadz provides a lot of popular cracks and keygens. No spyware and adware at all, just download new cracks, keygens and serials. If you have a software that needs a crack feel free to contact us.

Also you may contact us if you have software that needs to be removed from our website.