The new problem in the Zoom videoconferencing client was highlighted by renowned researcher Patrick Wardle at DEF CON 30 in early August of this year. It ends with advice regarding what to do about it. This post examines this latest security issue, and seeks to explain why holes in software sometimes crop up repeatedly in the same place. Fast-forward to August 2022, and a similar hole has been found (in terms of both location and exploitation consequences). In March 2020, as the whole world was just getting to grips with working remotely, a vulnerability was discovered in the installer of Zoom - one of the world’s prime remote communication tools - allowing arbitrary code execution on Apple computers.
