Key facts
- AI models were used to discover critical vulnerabilities in Zoom's annotation tool.
- Fewer than 20 prompts were used by researchers to find the vulnerabilities.
- The vulnerabilities could enable silent device takeover.
- Zoom has released fixes for the discovered flaws.
- The vulnerabilities affected all major operating systems.
- The discovery was made in one day.
Critical vulnerabilities within Zoom's annotation tool have been discovered using artificial intelligence, potentially enabling silent device takeover. Researchers utilized AI models, requiring fewer than 20 prompts, to identify these significant security flaws. The vulnerabilities, if exploited, could allow an attacker to gain unauthorized control over a user's device without their knowledge. Zoom has responded swiftly to the discovery by releasing patches to address the identified vulnerabilities. These fixes are now available for all major operating systems supported by Zoom, mitigating the immediate security threat to its user base. The rapid discovery highlights the growing capability of AI in identifying complex software weaknesses.