‘Zoomsday’ hack uncovered using fewer than 20 AI prompts
Fewer than 20 AI prompts. That's all it took to discover a critical Zoom vulnerability that could hijack any device in a meeting.
Why it matters
AI-assisted security research is accelerating vulnerability discovery, but it also lowers the barrier for attackers. This is the first major public case of an AI-discovered zero-day with real-world exploit potential — a watershed moment for both offensive and defensive security.
The key facts
5 to knowZoom annotation feature vulnerability allowed remote code execution during meetings
Researchers at A Security discovered flaw using fewer than 20 prompts on publicly available AI models
Exploit could allow attacker to steal data, access camera/microphone, or install malware
Vulnerability has been patched by Zoom
Demonstrates AI's capability to rapidly discover security exploits
Go to the source
The Verge AItheverge.com
Publisher excerpt: Zoom has patched a major security vulnerability that could allow an attacker to hijack anyone's device during a meeting. In a blog post on Tuesday, researchers at A Security say they uncovered the flaw using "fewer than 20 prompts on publicly available AI models," as reported earlier by Wired. The…