In April 2020, when pandemic remote working led to a 500% increase in daily traffic to the Zoom download page, some critics said the company’s software was “a privacy disaster” and even malware. Zoom has issued a patch for a bug on macOS that could allow a hacker to take control of a user’s operating system ( via MacRumors ). Download it here: Restarting Mac and closing all chromium processes makes the pinch gesture work again in some cases as well. Secondly, a third-party menubar app can fixes faulty Mac trackpad pinch gesture in one click. It is not the first time Zoom’s focus on frictionless use has led to a security hole. Then toggle off/on Pinch to Zoom in or out. Normally, the company tries to ensure that is safe by limiting the installer to only operate on code that has been cryptographically signed by Zoom, but the bug discovered by Wardle means that an attacker could trivially bypass that protection and convince the installer to load and run any malware they want. If you would prefer to use a different video conferencing platform, check out our handy guide to Microsoft Teams.
In order to make the user journey simpler, the installer continues to run in the background from the moment a user first installs zoom, and does so with “superuser” privileges, allowing it to change anything about the computer. Version 5.11.5 is a free update for Mac-based Zoom installs and is available now. Download Zoom Client for Mac - Official macOS client for the video conferencing platform that has taken the world by storm, allowing you to remotely chat. It targets the Zoom installer, which the company uses to enable frictionless automatic updates. Discovered by an independent security researcher, Patrick Wardle – whose brother Jeremy invented the popular game Wordle – the vulnerability was first presented at the Def Con hacking conference in Las Vegas last week. Popular video conferencing platform Zoom this week released an important update to its macOS app following user reports about the microphone not being disabled after ending a conference.
0 kommentar(er)
