Zoom is living up to its namesake in its responsiveness in addressing security and privacy issues that users have identified in its product. While the upcoming release of the 5.0 update addresses many initial concerns, the product still does not offer end-to-end encryption.
Source: Zoom Hits Milestone on 90-Day Security Plan, Releases Zoom 5.0. Published April 22, 2020.
The notable security and privacy enhancements in Zoom 5.0, and the advantages that each feature brings, are listed below:
Please refer to Zoom’s blog article Zoom Hits Milestone on 90-Day Security Plan, Releases Zoom 5.0 for additional information on these, and other enhancements in Zoom version 5.0.
Unfortunately, while the product’s meeting control and network transport is much more secure, the product still does not have end-to-end encryption.
It is commendable to see Zoom delivering on its promise to enhance product security in such a rapid manner within their 90-day enhancement freeze period.
The lack of end-to-end encryption, however, is disappointing, even with the additional enhancements in data-in-transit security. That said, the ability for meeting hosts to select the data center region for the hosting of meetings should offer some peace of mind for organizations concerned about their communications hosted on servers in countries where data privacy laws are not formally defined.
Zoom administrators should note that this is an update to the Zoom client software, and therefore the installation must occur on user workstations. This may prove to be a challenge during the current COVID-19 lockdown and work-from-home mandate. It would be helpful if Zoom built in the ability for Zoom administrators to push out client updates to all users of Zoom business accounts. In the interim, organizations should consider company-wide communication to all Zoom business users with upgrade instructions.
Moving townhall meetings online can present a range of virtual problems – not least, which web conferencing tool to use! This note explores how Microsoft Teams can be used by governmental bodies to remotely host their townhalls and other public engagements.
Upgrading one’s videoconferencing hardware is an important long-term investment that revolves around several decision points. This note offers a process for thinking about these decision points.
Two new vulnerabilities in Zoom’s web conferencing software were discovered in early June 2020. The vulnerabilities could allow malicious actors the ability to execute arbitrary code on target hosts and exploit path traversal vulnerabilities in the software. Zoom’s latest update addresses and remediates the vulnerabilities.
Zoom’s security consultant has announced that it will be providing strong encryption to paying customers and educational users of its web conferencing service. The move is being made in consultation with industry security consultants and privacy advocates.
RingCentral has launched RingCentral Video, a videoconferencing service integrated into its unified communications platform. This is a move that steers the company away from its partnership with Zoom Video Communications.
Remote annual general meetings and shareholder meetings have certain end-user requirements that cannot be fully met by standard go-to web conferencing tools. Explore what other software options are available in this marketspace.
The Office of the Attorney General of the State of New York has reached a settlement with Zoom Video Communications. The agreement promises enhanced data security and user controls.
Verizon has acquired BlueJeans for between $400-500 million. The move will see BlueJeans integrated into Verizon’s 5G plans, utilizing BlueJeans' advanced and encrypted video-conferencing solutions for telehealth, eLearning, and field service work.
With an update that makes it easier for new and existing users to jump into a meeting, Cisco’s Webex is looking to address one of the few areas where it’s not rated at the very top of the pack.