Security researchers exploit Zoom flaw using AI in under 20 prompts

AI-assisted discovery of critical Zoom vulnerability

Security researchers at A Security have disclosed a severe Zoom vulnerability that could allow attackers to take complete control of participants' devices during video meetings. The firm discovered the exploit using fewer than 20 prompts submitted to publicly available AI models, according to details first reported by Wired.

Zoom released patches for the vulnerability on Tuesday, addressing the flaw across Windows, macOS, Linux, Android, and iOS platforms.

How the exploit worked

The attack vector centered on Zoom's annotation feature, which enables users to draw on shared screens during meetings. By exploiting this functionality, an attacker could join or host a meeting and execute malicious code on victims' devices without any action required from the targets.

Once compromised, attackers could steal data, activate cameras or microphones, or install malware. According to A Security, the attack left no visual indication that a device had been compromised, making detection by victims virtually impossible.

Why it matters

This disclosure marks a significant shift in the cybersecurity landscape. Idan Levcovich, a vulnerability researcher at A Security, emphasized that exploits of this sophistication traditionally required "nation-state work: elite teams, months of effort, budgets that governments regulate as weapons." The fact that AI tools enabled the same result in a single day using publicly accessible models demonstrates how artificial intelligence is dramatically lowering the barrier to entry for discovering critical security flaws.

For enterprise technology leaders, this development carries two implications: AI is accelerating both offensive and defensive security capabilities, and the timeline for discovering and exploiting vulnerabilities is compressing rapidly. Organizations relying on video conferencing platforms for sensitive communications should prioritize rapid patch deployment and consider the evolving threat landscape when evaluating security protocols.

Broader security implications

The vulnerability's severity was compounded by its cross-platform impact and the lack of required victim interaction. Traditional exploits often require users to click malicious links or download files, giving security awareness training some defensive value. Zero-interaction exploits eliminate that layer of protection entirely.

Zoom users should verify they are running the latest version of the application across all devices. The company has not disclosed whether the vulnerability was actively exploited before the patch was released.

The details were first reported by Wired, with A Security publishing their findings in a blog post on Tuesday.