Zoom ha rilasciato aggiornamenti di sicurezza che risolvono 4 vulnerabilità con gravità "alta" in Zoom Workplace, piattaforma per la comunicazione e la collaborazione, e nei relativi client Zoom. Tali vulnerabilità, qualora sfruttate, permetterebbero a un utente malintenzionato non autenticato di elevare i propri privilegi e di accedere a informazioni sensibili sui sistemi interessati.
For the latest discoveries in cyber research for the week of 17th August, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Colombia’s Ministry of Justice has experienced a ransomware attack that affected part of its technology infrastructure and disrupted public services related to illicit-drug monitoring and legal processes. Officials confirmed that some files were encrypted but stated that no data theft was detected during the incident. MyDr, Poland’s primary…
Researchers have found three vulnerabilities in the popular Zoom meeting platform that could let one meeting participant attack another through malicious collaboration data. The vulnerabilities, tracked as CVE-2026-53413, CVE-2026-53414, and CVE-2026-53415, affect the code Zoom uses to process annotation data shared during meetings. The researchers named the set of flaws “Zoomsday.” Affected applications are: Zoom Workplace on all supported platforms before version 7.1.5 and 7.0.6, depending on…
Zoom heeft kwetsbaarheden verholpen in Zoom Clients en Zoom VDI Client software. De Zoom Clients bevatten meerdere kwetsbaarheden in de annotator functie. Eén betreft een ontbrekende bounds check die kan leiden tot een buffer overwrite, waardoor een externe deelnemer via netwerktoegang mogelijk willekeurige code kan uitvoeren op het apparaat van een andere deelnemer. Een andere kwetsbaarheid in dezelfde functie betreft een buffer over-read, die een denial-of-service kan veroorzaken door crashes…
Rilevate 4 nuove vulnerabilità, di cui 3 con gravità “alta”, nel software Zoom. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato di ottenere l'esecuzione di codice arbitrario da remoto e di accedere a informazioni sensibili sui sistemi interessati.
Written by: Chad Reams, Tufail Ahmed, Keith Knapp, Ashley Frazer, Tyler McLellan Introduction From January through May 2026, Mandiant identified a financially motivated data theft extortion campaign executed by the threat cluster UNC3753 (also tracked as "Luna Moth," “Chatty Spider,” and "Silent Ransom Group") targeting dozens of organizations across professional, legal, and financial services in the United States. UNC3753 leverages voice phishing (vishing) and social engineering deception…