# AI-Powered Hacking Reveals Critical Zoom Vulnerabilities As AI models gain advanced capabilities to identify software vulnerabilities, develop exploits, and even orchestrate autonomous hacking sprees, a sobering new example has emerged. Researchers from the digital defense firm **A Security** disclosed critical vulnerabilities in the video conferencing platform **Zoom** that could have allowed attackers to silently take over targets' devices. ## The Silent Threat of Zoomsday The discovered flaw, dubbed "Zoomsday" by **A Security**, would have rendered anyone on a screen-sharing call vulnerable. Whether a participant or the host, a silent attack could have been executed with no indication or interaction required from the victim. **A Security** cofounder Omer Gull highlighted the alarming ease of discovery. "What is interesting for us and what we believe is dangerous is the democratization of these capabilities – the barrier to entry is dropping rapidly," Gull stated. He noted that what previously would have taken a team of five people six months, with extensive refinement, was achieved with fewer than 20 prompts using publicly available AI models. ## AI's Role in Vulnerability Discovery The vulnerabilities were specifically found within the protocol facilitating real-time annotation during screen sharing. **A Security**'s AI bug-hunting systems targeted this component, mirroring human bug hunters' intuition that convoluted and obscure functions often harbor overlooked flaws. This is particularly true for proprietary, closed-source software like **Zoom**, where complex, esoteric features may receive less scrutiny than core functionalities. ## Widespread Impact and Swift Patching **Zoom** confirmed the findings, issuing a security advisory and rolling out fixes for the flaws. The vulnerabilities affected devices running all supported operating systems: **Windows**, **macOS**, **Linux**, **iOS**, and **Android**. The company deployed both server-side and client-side patches to address the issues. ## The Gravity of Trust Exploitation **A Security** cofounder Yossi Torati emphasized the severe implications. "If you just get on a Zoom with us, we can take over your device," Torati explained. "The worst-case scenario is that we can take over an enterprise just by having this vulnerability in our hands. If I’m an attacker, I can be on a call with someone from a company, take control of their computer and their credentials, and then use them to move laterally in the enterprise." Video conferencing platforms like **Zoom** are deeply integrated into both professional and personal lives, fostering a sense of trust among users. The ability to compromise a device simply by joining a call represents a significant breach of that assumed security, underscoring the escalating challenges in cybersecurity as AI-powered tools become more accessible.