The Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has issued a security advisory to users of the popular videotelephony software, Zoom, of cyber attacks by remote hacking. According to NCC-CSIRT, the Indian Computer Emergency Response Team (CERT-In) had recently discovered several flaws in the Zoom platform.
The NCC-CSIRT advisory stated, “A remote attacker could exploit the vulnerabilities to circumvent implemented security measures and cause a denial of service on the targeted machine.
“These vulnerabilities exist owing to incorrect access control implementation in Zoom On-Premises Meeting Connector MMR prior to version 4.8.20220815.130.
“A remote attacker could exploit these flaws to join a meeting they were not permitted to attend without being seen by the other attendees. They can also access audio and video feeds from meetings they were not permitted to attend, as well as interrupt other sessions”.
The Commission however urged Zoom users to update the latest version of the software from the company’s official website to prevent data breaches from hackers.
Zoom became very popular for virtual meetings in the wake of the COVID-19 pandemic with around 300 million daily users.