On 4/2/20 5:43 PM, Mark Wieder via use-livecode wrote:

I'd be more concerned about this vuln if I were running Windows.
Luckily there's a simple group policy or registry fix.

<https://www.bleepingcomputer.com/news/security/zoom-lets-attackers-steal-windows-credentials-run-programs-via-unc-links/>

I'm *very* impressed with Zoom's engineering team, rolling out a new version to quash this vulnerability asap. I got prompted to install the new version this morning. Upgrading was painless. Not only is Zoom being super-responsive about this (and given the publicity lately it stands to reason that they would) but they're being upfront about the issues and backtracking and patching in public in real time. You don't often see companies with this size a customer base turn on a dime like this.

--
 Mark Wieder
 ahsoftw...@gmail.com

_______________________________________________
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

Reply via email to