Latest in Gear

Image credit:

There's another macOS update to fix Zoom security exploits

Apple pushed quietly pushed out the update to remove vulnerable software.
AJ Dellinger, @ajdell
July 16, 2019
Share
Tweet
Share

Sponsored Links

Devindra Hardawar/Engadget

Apple is still working to plug the holes created by a security exploit recently discovered in video conferencing app Zoom. According to The Verge, Apple quietly pushed out a security update for macOS that removes vulnerable software installed automatically by RingCenter and Zhumu -- two video conferencing tools that use Zoom technology and suffer from the same security holes.

This issue first started last week, when security researchers identified a flaw in Zoom's software that took advantage of the app's click-to-join feature. If a person clicked a link in their web browser, they would automatically join a conference and their webcam would turn on without their explicit permission. Zoom initially claimed the flaw was a necessary workaround to allow its software to function properly with Apple's Safari browser but has since changed its approach and has worked to address the issue.

Last week, Zoom announced that it removed access to a local web server that enabled the vulnerability. One day later, Apple, working with Zoom, released an automatic security update for macOS that addressed the issue. The company plans to continue releasing fixes for all of Zoom's partners like RingCenter and Zhumu.

In this article: apple, gear, macos, ringcentral, security, zhumu, zoom
All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
Tweet
Share

Popular on Engadget

Texas Instruments makes it harder to run programs on its calculators

Texas Instruments makes it harder to run programs on its calculators

View
Samsung Galaxy Note 20 leaks hint at giant screens and S20 Ultra features

Samsung Galaxy Note 20 leaks hint at giant screens and S20 Ultra features

View
Space Station receives the last of NASA's science racks after 19 years

Space Station receives the last of NASA's science racks after 19 years

View
Hacked NES Power Glove controls a modular synth with finger wriggles

Hacked NES Power Glove controls a modular synth with finger wriggles

View
Astronomers spot a strange, first-of-its-kind asteroid near Jupiter

Astronomers spot a strange, first-of-its-kind asteroid near Jupiter

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr