On 4/2/20 5:15 PM, J. Landman Gay via use-livecode wrote:
Your first link describes a different attack, since corrected. The one Bob posted is dated April 2 and the research link it includes is dated April 1. It is new info.

Yes but...
the new zero-days require physical access to the hardware.

I'd be more concerned about this vuln if I were running Windows.
Luckily there's a simple group policy or registry fix.

<https://www.bleepingcomputer.com/news/security/zoom-lets-attackers-steal-windows-credentials-run-programs-via-unc-links/>

--
 Mark Wieder
 ahsoftw...@gmail.com

_______________________________________________
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

Reply via email to