Videoconferencing platform Zoom recently published an urgent security advisory to resolve critical vulnerabilities that could allow malicious attackers to gain complete remote control over user devices during active video calls. Discovered by cybersecurity researchers at A Security, the severe flaw was dubbed “Zoomsday,” highlighting major risks associated with real-time collaboration features in modern communication software.

The Zoomsday vulnerability was particularly dangerous due to its zero-click execution mechanism, operating seamlessly without requiring any direct interaction from the targeted victim or displaying any visual indicators. Simply joining a Zoom call where screen sharing was active—whether participating as a session host or as a standard participant—was sufficient to expose a user’s system to total remote compromise.

Researchers identified these vulnerabilities by leveraging publicly available artificial intelligence (AI) models. Security specialists revealed that fewer than 20 commands were necessary to detect the underlying flaws and construct a fully functional exploit. This rapid process emphasizes growing concerns regarding the democratization of cybercrime, as sophisticated exploits that previously required a dedicated team working for six months can now be replicated in a fraction of the time with AI assistance.

From a technical standpoint, the vulnerabilities were located within the protocol responsible for managing real-time annotations during screen-sharing sessions. The scope of the issue was comprehensive, affecting all major supported operating systems, including Windows, macOS, Linux, iOS, and Android.

Zoom has already released the necessary software updates to patch these vulnerabilities and mitigate potential cyberattacks. Because the platform is widely used across both enterprise environments and personal devices, cybersecurity professionals strongly advise all users to perform an immediate security update across all desktop and mobile devices.

Filed in . Read more about Cybersecurity and Zoom.