If you would prefer to use a different video conferencing platform, check out our handy guide to Microsoft Teams. Version 5.11.5 is a free update for Mac-based Zoom installs and is available now.

Zoom spent the weekend working on a new patch following Wardle’s presentation, and it is now available. Zoom was also found to have been sending user data to Facebook, and then the US Department of Justice filed charges against a Zoom executive for collusion with the Chinese government. In 2020 Wardle discovered a Mac vulnerability in Zoom which allowed cameras and microphones to be hijacked. This isn’t the first time Zoom has been criticized for lax security. Zoom released a small patch a few weeks before the conference but Wardle said the vulnerability was still present. He had followed responsible disclosure protocols, which gives companies time to fix bugs, and after eight months of inaction, he felt he had to warn others.

Wardle decided to go public with his findings at Def Con. At this level, the MacBook recognizes the hacker as a “superuser” who can then read, change or create any file, including adding other malware to the system.

The Zoom package installer used a weak security certificate test and any file with the same name as the official Zoom package could easily bypass the test. The exploit allowed a threat actor to take control of someone’s Mac through the Zoom app, right down to the root level of the machine.

The founder of the security non-profit Objective-See and an ex-NSA security analyst, Patrick Wardle, took to the stage on Friday and presented a stunning find: a massive security vulnerability in the Zoom installer for MacBooks. Zoom spent the weekend patching a major security flaw in its Mac app, and the update is available right now.Īccording to The Verge, it all began at Def Con, a computer security and hacker conference in Las Vegas. If you have Zoom installed on your MacBook, you’ll want to update the app right now.

Zoom for mac m1 chip download