Zoom fixed a big problem on Mac, and you should update today

If you have Zoom installed on your MacBook, you’ll want to update the app right now. Zoom spent the weekend patching a major security flaw in its Mac app, and the update is available right now. According to The Verge, it all began at Def Con, a computer security and hacker conference in Las Vegas.

The founder of the security non-profit Objective-See and an ex-NSA security analyst, Patrick Wardle, took to the stage on Friday and presented a stunning find: a massive security vulnerability in the Zoom installer for MacBooks.

The Logitech Brio 4K Pro attached to a Macbook.

The exploit allowed a threat actor to take control of someone’s Mac through the Zoom app, right down to the root level of the machine. The Zoom package installer used a weak security certificate test and any file with the same name as the official Zoom package could easily bypass the test. At this level, the MacBook recognizes the hacker as a “superuser” who can then read, change or create any file, including adding other malware to the system.

Frustratingly, Wardle had discovered the security threat back in December and had informed Zoom of his findings. Wardle said Zoom didn’t take him seriously and released a patch after a month, which contained another security bug. He informed Zoom of this second bug, and more importantly, of the first bug not being fixed.

Zoom sat on it. Wardle decided to go public with his findings at Def Con. He had followed responsible disclosure protocols, which gives companies time to fix bugs, and after eight months of inaction, he felt he had to warn others.

Zoom released a small patch a few weeks before the conference but Wardle said the vulnerability was still present. This isn’t the first time Zoom has been criticized for lax security. In 2020 Wardle discovered a Mac vulnerability in Zoom which allowed cameras and microphones to be hijacked.

Zoom was also found to have been sending user data to Facebook, and then the US Department of Justice filed charges against a Zoom executive for collusion with the Chinese government.

Zoom spent the weekend working on a new patch following Wardle’s presentation, and it is now available. Version 5.11.5 is a free update for Mac-based Zoom installs and is available now.

If you would prefer to use a different video conferencing platform, check out our handy guide to Microsoft Teams.

Editors’ Recommendations

Tags:

appleyard-flowers listed on couponmatrix.ukeyeko listed on couponmatrix.ukmarriott-hotels listed on couponmatrix.uknaio-nails listed on couponmatrix.ukparty-pieces listed on couponmatrix.uksuttons-seeds listed on couponmatrix.uk
appleyard-flowers listed on couponmatrix.ukPut a smile on that special someone’s face with a bouquet of beautiful blooms from Appleyard Flowers, London’s premier boutique florist. Whether you’re hoping to put a ring on it or shower your mum with affection, you could add a little scent and colour to your loved one’s life with an Appleyard Flowers discount code from us. From simple yet stylish arrangements to show-stopping, luxury bouquets, you’ll be spoiled for choice no matter what the occasion with the stunning Appleyard Flowers range.
eyeko listed on couponmatrix.ukWhen it comes to makeup products, we’re always searching for our Holy Grail. Eyeko is the eye makeup expert, and it’ll help you nail that swooping eyeliner flick, everyday neutral eyeshadow or eye-popping lash look. Cruelty-free and made with natural ingredients, you’ll love Eyeko’s high-performance mascaras, brow makeup and vegan collection. There’s even an Eyeko discount code available if you refer your friends – £10 off! Thanks to the great offers available, including exclusive offers for students and NHS employees and free delivery on orders over £15, you can switch to Eyeko without busting your beauty budget.
marriott-hotels listed on couponmatrix.ukMarriott Bonvoy is one of the most highly-respected hotel operators in the world, with over 4,000 luxury hotels located in over 80 countries in all corners of the globe. It was only natural then that we at Groupon would want to work with Marriott to bring you the best holiday deals possible. Spend your marriott discount code on a luxurious European break; dream romantic honeymoon, or even a road trip through the USA - the choice is absolutely yours.
naio-nails listed on couponmatrix.ukHey ladies, when you want to look your finest, let your hands be handled by Naio Nails – the premium supplier of salon-quality nail products for beauticians and enthusiasts alike. With the help of a Naio Nails discount codes you can expect astonishing prices across a range of acrylic paint, fake nails, gel and accessories that will leave your stealing the show. So why not try out a new look for your fingers today and see why so many need Naio now on their nails.
party-pieces listed on couponmatrix.ukAnyone with anything to celebrate can stock up on fun and thrills with a little help from a Party Pieces promo code. The company specialises in helping its customers throw unforgettable parties, and have a huge range of party items available with Party Pieces coupon codes. Groupon wants to celebrate good times too, and is helping party-lovers get what they need using Party Pieces discount codes.
suttons-seeds listed on couponmatrix.ukOver 200 years of gardening knowledge and expertise have cemented Suttons as a number one choice for gardeners all over when it comes to growing, potting and planting. With a Suttons Seeds discount code you can get hold of the tools and products you need to get the most out of your garden without busting your budget! Visit the website today to have a scroll through all the products on offer.