Critical 'Zoomsday' flaw enables total device takeover during Zoom calls — AI-assisted research only used 20 prompts to find an exploit to hack hundreds of millions of people.

Critical 'Zoomsday' flaw enables total device takeover during Zoom calls — AI-assisted research only used 20…

A.Security found Zoomsday using 20 AI prompts: a buffer overrun in Zoom's proprietary annotation library enables RCE on 220M users (patched v7.0.6). AI has collapsed the barrier to nation-state exploits even in proprietary code; small teams now deploy weapons-grade attacks, forcing tech leaders to accelerate patch cycles and reassess Zoom on critical infrastructure.