Home > Categories > Security Incident and Event Management > Apple Rushes to Fix Zoom Security Flaw

Software Category

Security Incident and Event Management

Write Review

Apple Rushes to Fix Zoom Security Flaw

What happened?

Apple has delivered a silent update to Macs, rectifying a security flaw in its Zoom web-conferencing service.

Security researcher Jonathan Leitschuh initially contacted Zoom on March 8, 2019 to report that a hidden web server (used to bypass user consent for automatically joining meetings) could be accessed by external users without permission, compromising webcam and voice usage.

Moreover, uninstalling Zoom did not resolve this security issue, as the hidden web server would reinstall Zoom onto the original operating system.

Source: Web Conferencing from SoftwareReviews, Report Published April 2019.

The hidden web server is now removed from all Macs through Zoom’s update. Clients can manually update Zoom through its download center, but since Zoom forced the update, manual updates may not be necessary.

Mac users who select “Always turn off my video” also have this webcam preference saved for all future calls. However, Zoom’s update does not fully account for Windows users, whose webcam may still be turned on when joining meetings automatically.

Our Take

Based on client feedback, SoftwareReviews ranks Zoom as tenth out of the 12 leading web conferencing vendors, with a composite score of 7.6/10. Having potentially compromised 750,000 companies worldwide, Zoom’s security issue could cement this ranking.

Source: Web Conferencing from SoftwareReviews, Report Published April 2019.

However, with this security issue resolved, Zoom could experience the service recovery paradox: clients will end up reporting higher satisfaction in end-user reports despite this setback. After all, SoftwareReviews lists Zoom as a leader in product innovation.


Want to Know More?

Scorecard for Zoom

Evaluate Web Conferencing Vendors

Other Recent Research in Security Incident and Event Management

Security Incident and Event Management

Chronicle Expands Its North American Presence by Partnering With Herjavec Group

Chronicle, Alphabet’s enterprise security company, expands its North American partner base with Herjavec Group, its first Canadian partner. Herjavec Group is the first service provider in Canada to be certified in, and provide access to, Chronicle’s security intelligence products.

Security Incident and Event Management

IBM Raises Price on Software Support; Shoves Customers Toward the Cloud

IBM is changing the terms of its ubiquitous Passport Advantage agreement to remove entitled discounts on over 5,000 on-premises software products, resulting in an immediate price increase for IBM Software & Support (S&S) across its vast customer landscape.

Security Incident and Event Management

Organizations Report Higher Satisfaction When Switching to Software With an Info-Tech Award

Thinking about choosing a new software vendor but don't know where to start? Narrow down your shortlist by focusing on software that has received an Info-Tech Research Group award. New data from SoftwareReviews shows that organizations reported higher satisfaction when they switched to software that had received an Info-Tech award.

Security Incident and Event Management

Bomgar & BMC Team Up to Speed Trouble-Ticket Resolution

For organizations that experience time-sensitive incidents that must be resolved in the most optimal and efficient manner, Bomgar (Beyond Trust) and BMC Software may have the solution. The two vendors have teamed up to address a reduction in the time it takes to resolve problematic tickets and assist in lessening the impact of cyber threats to which all organizations are subjected.