Users of Zoom on Macs told to update app as company issues security fix

  • 📰 GuardianAus
  • ⏱ Reading Time:
  • 34 sec. here
  • 2 min. at publisher
  • 📊 Quality Score:
  • News: 17%
  • Publisher: 98%

Nigeria News News

Nigeria Nigeria Latest News,Nigeria Nigeria Headlines

Security flaw had meant hackers could bypass protection and convince installer of app to load and run malware

It targets the Zoom installer, which the company uses to enable frictionless automatic updates. In order to make the user journey simpler, the installer continues to run in the background from the moment a user first installs zoom, and does so with “superuser” privileges, allowing it to change anything about the computer.

Normally, the company tries to ensure that is safe by limiting the installer to only operate on code that has been cryptographically signed by Zoom, but the bug discovered by Wardle means that an attacker could trivially bypass that protection and convince the installer to load and run any malware they want.

It is not the first time Zoom’s focus on frictionless use has led to a security hole. In April 2020, when pandemic remote working led to a 500% increase in daily traffic to the Zoom download page,The company’s desire to be the easiest way of joining video calls has led it to seek to bypass security measures that protect a user’s computer.

 

Thank you for your comment. Your comment will be published after being reviewed.
Please try again later.
We have summarized this news so that you can read it quickly. If you are interested in the news, you can read the full text here. Read more:

 /  🏆 1. in NG

Nigeria Nigeria Latest News, Nigeria Nigeria Headlines