AI Models Uncover Critical Zoom Vulnerability in Screen Sharing with Fewer Than 20 Prompts
12 Sources
[1]
Researchers found a way to hijack devices through Zoom screen sharing
As AI models gain advanced capabilities to find vulnerabilities in software, develop ways to exploit them, and even carry out autonomous hacking sprees, researchers offered a sobering new example on Tuesday, disclosing vulnerabilities in the video conferencing platform Zoom that could have been
[2]
A Zoom Screen-Sharing Bug Let Anyone Take Over Other Devices on a Call
As AI models gain advanced capabilities to find vulnerabilities in software, develop ways to exploit them, and even carry out autonomous hacking sprees, researchers offered a sobering new example on Tuesday, disclosing vulnerabilities in the video conferencing platform Zoom that could have been
[3]
'Zoomsday' hack uncovered using fewer than 20 AI prompts
Zoom has patched a major security vulnerability that could allow an attacker to hijack anyone's device during a meeting. In a blog post on Tuesday, researchers at A Security say they uncovered the flaw using "fewer than 20 prompts on publicly available AI models," as reported earlier by Wired. The
[4]
Zoomsday vulnerability let anyone in a Zoom meeting take over anybody else -- AI-assisted research only used 20 prompts to find an exploit to hack hundred of millions of people.
We've typed many words about how the industry-standard 90-day security bug disclosure window is effectively dead and gone with the advent of AI-assisted exploiting. Illustrating that point rather poignantly, researchers at A.Security easily came up with Zoomsday. This exploit let any participant in
[5]
Zoom Screen-Sharing Flaw Could Give Attackers Control of Participants' Devices
(Credit: Thomas Fuller/SOPA Images/LightRocket via Getty Images) Researchers at A Security have discovered a critical bug in Zoom that allows attackers to assume full control of a participant's device by exploiting a flawed screen-sharing function. The vulnerability exists in the Zoom Workspace
[6]
Zoom screen-sharing bug let people fully take over other devices on a call - Engadget
Cybersecurity researchers discovered a fairly insidious bug in Zoom that lets people quite literally take control of someone else's device. This is done by exploiting a flaw in the screen-sharing function. The vulnerability has been found in the Zoom Workspace app for Windows, Mac, iOS Android and
[7]
Zoom fixed three bugs that let anyone on a call take over your machine
The flaws needed no click and left no visible trace, but the patches went out two months ago and the AI discovery story is thinner than it looks Zoom has patched three memory corruption flaws in its annotation feature that allowed any meeting participant to run code on another attendee's device
[8]
Turns Out You Don't Need The Most Powerful AI Models to Cause a Major Cybersecurity Incident
There are few things more mortifying than the prospect of sharing something you didn't intend to on a work Zoom call. Now imagine it's entirely out of your control. That is the risk of a security flaw discovered and disclosed by a cybersecurity company called A Security, which found a vulnerability
[9]
This shocking Zoom bug allowed silent device takeovers on Android and iOS
Zoom has patched the flaws, so updating the Zoom app is the most important thing you can do. Over the past few months, we have watched frontier AI models rapidly alter the cybersecurity landscape -- from AI models breaking technical barriers to mounting regulatory scrutiny over weaponized AI
[10]
A dangerous Zoom screen-sharing bug could have let hackers hijack other devices on a call
* AI‑found Zoom flaws enabled device takeover through malicious annotation messages * Exploits worked across all platforms and required only joining a video call * Researchers warn AI now enables rapid, nation‑state‑level exploit development Experts have warned that Zoom, one of the most popular
[11]
Zoomsday: AI Used to Build Critical Zoom Exploit in One Day
Zoom fixed the vulnerabilities before they were publicly disclosed. AI is making it faster and easier to find serious security flaws. Now, a researcher says he used publicly available models to find vulnerabilities in the video chat platform Zoom and build a working attack in less than 24
[12]
If you use Zoom, update now: they've discovered how to take control of a video call with just 20 prompts to an AI
If you use Zoom, it's time to update the app as soon as possible. The reason, as so often, is security, since the researchers at A Security have discovered a vulnerability that allowed another participant to take control of a device during any video call. How did they find it? Very easily, with
Share
Copy Link
Researchers at A Security discovered a critical Zoom vulnerability using publicly available AI models with fewer than 20 prompts. The flaw in Zoom's screen sharing annotation feature allowed attackers to hijack devices through remote code execution across Windows, macOS, Linux, iOS, and Android platforms without any victim interaction.
AI Models Expose Critical Zoom Vulnerability in Record Time
Researchers from digital defense firm A Security uncovered a severe Zoom vulnerability using publicly available AI models with fewer than 20 prompts
1
2
. The discovery, made in early June, demonstrates how AI-assisted research is fundamentally changing cybersecurity by enabling attackers to develop nation-state-level exploits in under 24 hours. The democratization of hacking capabilities means what previously required a team of five people working for six months can now be achieved in a single day3
.How the Screen Sharing Exploit Worked
The Zoom vulnerability existed in the protocol used to facilitate real-time annotation during screen sharing
1
. Anyone on a call involving screen sharing—whether participants or the host—became vulnerable to a silent attack requiring no interaction from the victim. The exploit enabled remote code execution, allowing attackers to take complete control of target devices across all platforms Zoom supports: Windows, macOS, Linux, iOS, and Android5
. This zero-click exploit showed no visual cue indicating the compromise, making it particularly dangerous3
.
Source: Wired
The technical vulnerability involved a buffer overrun in the code library handling annotations
4
. The annotation feature received objects in serialized form with count fields, but the code failed to check maximum size boundaries. Attackers could exploit this by sending oversized data chunks padded with malicious code.The Scope and Impact of Zoomsday
Dubbed the "Zoomsday vulnerability," this flaw affected Zoom Workplace versions before 7.0.6 and 7.1.5 on the fast track branch
4
. With Zoom's monthly active users estimated at around 220 million and commanding approximately 56% of the global conferencing market share, the exploitable area was substantial4
."If you just get on a Zoom with us, we can take over your device," A Security cofounder Yossi Torati explained
2
. The worst-case scenario involved enterprise takeovers, where an attacker could join a call with a company employee, seize control of their computer and credentials, then move laterally throughout the enterprise network.AI-Assisted Research Reshapes Cybersecurity Landscape
The discovery highlights how AI models are lowering the barrier to entry for sophisticated cyber threats. "What is interesting for us and what we believe is dangerous is the democratization of these capabilities—the barrier to entry is dropping rapidly," said A Security cofounder Omer Gull
2
. The AI bug hunting systems specifically targeted the annotation feature because, like human bug hunters, they've been trained to recognize that convoluted and obscure functions often contain overlooked vulnerabilities1
.
Source: Tom's Hardware
Vulnerability researcher Idan Levcovich from A Security emphasized that "producing a working exploit against it has always been nation-state work: elite teams, months of effort, budgets that governments regulate as weapons"
3
. That model has now collapsed, with offensive security capabilities becoming accessible through publicly available AI models.Related Stories
Zoom Patches and Response Timeline
A Security notified Zoom about the vulnerability on June 10, and the company acknowledged it the following day
5
. Zoom issued security advisories on Tuesday, detailing both server-side and client-side fixes—Zoom patches for both the company's servers and applications running on customer devices1
. The company deployed fixes within weeks to mitigate the threat5
. Users running updated versions of Zoom Workplace should now be protected from this exploit.Why This Development Matters
This incident underscores a critical shift in the cybersecurity landscape. The traditional 90-day security bug disclosure window appears increasingly inadequate when AI models can identify and weaponize vulnerabilities in hours rather than months
4
. Video conferencing platforms like Zoom occupy a unique position of trust in both personal and professional contexts, making them attractive targets. People typically have their guard down when joining a Zoom call, viewing it as a gesture of trust rather than a potential threat vector2
.
Source: Android Authority
The proprietary, closed-source nature of Zoom's software made the annotation feature particularly vulnerable. While established companies conduct extensive code review and vetting, esoteric yet complex features like annotation are more likely to contain mistakes without the benefit of public, open review
1
. As A Security researchers noted, "the barrier that kept these weapons scarce has collapsed, and it will not come back"4
, signaling that organizations must fundamentally rethink their security postures in an era where AI models accelerate both vulnerability research and exploit development.References
Summarized by
Navi
Related Stories
Google Chrome Fixes 1,072 Security Bugs in June Using AI—More Than Past Two Years Combined
31 Jul 2026•Technology
Meta AI hack and ChatGPT flaws expose critical AI security gaps through prompt injection
29 May 2026•Technology
First Zero-Click AI Vulnerability "EchoLeak" Discovered in Microsoft 365 Copilot
12 Jun 2025•Technology
Recent Highlights
1
AI Hallucination Nearly Sparked US Military Confrontation With Chinese Ship in Middle East
Technology
2
Google Gemini Hacked Three Real Companies During Cybersecurity Testing, Raising AI Safety Concerns
Technology
3
OpenAI Claims AI Breakthrough on Navier-Stokes Problem, Sparking Math Community Crisis
Science and Research
Recent Highlights
Today's Top Stories
Don’t drown in AI news. We cut through the noise - filtering, ranking and summarizing the most important AI news, breakthroughs and research daily. Follow topics that matter to you and stay ahead.
