Update Zoom App For Mac
Apple said it has pushed a silent macOS update that removes the undocumented webserver that was installed by the Zoom conferencing app for Mac.
The webserver accepts connections from any device connected to the same local network, a security researcher disclosed on Monday. The server continues to run even when a Mac user uninstalls Zoom. The researcher showed how the webserver can be abused by people on the same network to force Macs to reinstall the conferencing app. Zoom issued an emergency patch on Tuesday in response to blistering criticism from security researchers and end users.Apple on Wednesday issued an update of its own, a company representative speaking on background told Ars. The update ensures the webserver is removed—even if users have uninstalled Zoom or haven’t installed Tuesday’s update. Apple delivered the silent update automatically, meaning there was no notification or action required of end users. The update was first reported by TechCrunch.
Best software video editing for mac. Apple's update causes Zoom users who click on a conference link to receive a prompt requiring them to confirm they want to join. Previously, clicking on a link—or even encountering a link hidden in a malicious website—automatically opened Zoom and put them into the conference. Zoom developers came under criticism for this behavior as well, because it had the potential to catch users off-guard and expose them to hackers.
- Jul 10, 2019 Apple has released a silent update for Mac users removing a vulnerable component in Zoom, the popular video conferencing app, which allowed websites to automatically add a.
- Jul 10, 2019 Apple said it has pushed a silent macOS update that removes the undocumented webserver that was installed by the Zoom conferencing app for Mac. Further Reading Zoom for Mac made it too easy for.
Apr 02, 2020 Zoom is moving quickly to fix its macOS installer. A software engineer discovered Zoom uses 'malware-like' techniques to install, and Zoom’s CEO promised it would do better. A new update. You can easily update the Zoom app on your desktop, or check to see if you are due for an update. How to update your Zoom desktop app. Open the Zoom app on your Mac or PC. Download, Install, or Update the best Mac apps - MacUpdate.
Apple occasionally issues silent updates to block malware that’s actively circulating on the Internet. It’s less common for the company to issue silent updates that block or remove something installed by an app users installed by choice. The Apple representative said the company took this action to protect users against risks posed by the webserver. The Zoom app is installed on about 4 million Macs, researcher Jonathan Leitschuh estimated.
Representatives from Zoom didn’t respond to an email seeking comment for this post.
Download Zoom App For Pc
Update: Zoom says it has a series of updates planned to address these security concerns.
Zoom App For Mac Download
A new zero-day vulnerability has been disclosed for the Zoom video conference app on the Mac. In a post on Medium, security researcher Jonathan Leitschuh outlined the flaw, which could let websites take over your Mac’s camera.
When you install the Zoom app on your Mac, it also installs a web server, which “accepts requests regular browsers wouldn’t,” as detailed by The Verge. It’s that web server that is seemingly causing this vulnerability.
Essentially, the Zoom web server is running as a background process. Thus, any website is able to “forcibly join a user to a Zoom call, with their video camera activated, without the user’s permission.” If you simply click a link, you’ll automatically join a Zoom conference call with your camera enabled, even if you no longer have the Zoom app installed.
We tested the vulnerability using a link in Leitschuh’s Medium post and were immediately connected to a Zoom conference call with our Mac’s camera enabled. One of the most jarring aspects of this vulnerability is that it works even if you have uninstalled the Zoom app:
Additionally, if you’ve ever installed the Zoom client and then uninstalled it, you still have a localhost web server on your machine that will happily re-install the Zoom client for you, without requiring any user interaction on your behalf besides visiting a webpage. This re-install ‘feature’ continues to work to this day.
Leitschuh first disclosed the vulnerability to Zoom back in March. The timeline in the Medium post explains that the vulnerability was fixed at one point since then, but that a regression this month caused the vulnerability to work again. The regression was fixed today, but Leitschuh discovered a workaround.
Additionally, Zoom lacks “sufficient auto-update capabilities,” according to Leitschuh, which means there are still still users running older versions of the app.
So how can you protect yourself? The easiest way is to go into the Zoom settings window and enable the “Turn off my video when joining a meeting” setting. You can also run a series of Terminal commands to uninstall the web server completely, and those commands can be found at the bottom of Leitschuh’s Medium post.
More technical details, as well as proof of concept links, can be found on Medium.
This Zoom vulnerability is bananas. I tried one of the proof of concept links and got connected to three other randos also freaking out about it in real time. https://t.co/w7JKHk8nZypic.twitter.com/arOE6DbQaf
— Matt Haughey (@mathowie) July 9, 2019
FTC: We use income earning auto affiliate links.More.