- Zoom just released an upgrade for its Mac platform application.
- The most recent patch closes a critical security hole that could have given hackers full access to a Mac.
- It appears that the Zoom application’s auto-updater program possessed root-level access to the system.
Zoom just released an upgrade for its Mac platform application. The most recent patch closes a critical security hole that could have given hackers full access to a Mac user’s system.
A critical security hole that allowed someone with bad intent to acquire root-level access to users’ Mac computers had to be patched, according to a report on the well-known cloud-based video conferencing service.
The hackers would then be able to take over their systems as a result. It appears that the Zoom application’s auto-updater program, which possessed root-level access to the system, was the source of this vulnerability.
Only a signature verification method was available for this software, and it was simple to trick it by giving your package a familiar file name.
In other words, a hacker may be able to force a downgrade in your program or otherwise trigger attacks. The developer and researcher of the Objective-See Foundation (OSF), Patrick Wardle, was the first to identify the security problem.
Zoom was alerted to this vulnerability by Wardle in December 2021. Though the patch also introduced another fault, the corporation has now formally resolved this problem.
However, Zoom soon repaired this as well, and Wardle discovered another flaw in the program that had also recently been addressed. Notably, Zoom’s platform for Mac systems has experienced security-related problems before.
The company also had to act swiftly to address a camera hijack vulnerability in 2019, which increased criticism of the program, particularly in 2020 when the app had a meteoric growth in popularity.
[embedpost slug=”youtube-users-can-now-zoom-in-on-videos/”]