Researchers found a way to hijack devices through Zoom screen sharing

Researchers have disclosed a Zoom flaw that could have let an attacker take over a target’s device during a screen-sharing call. The nasty part is how little the victim would have had to do: nothing. If the call involved screen sharing, a participant or host could have been hit by a silent attack with no warning and no interaction required.

The bug was found in early June by researchers at the digital defense firm A Security, using publicly available AI models. According to the company, it took fewer than 20 prompts to uncover the vulnerability and build a working attack. That is a short runway for something with device-takeover potential.

Zoom responded on Tuesday with a security advisory and said fixes were already being rolled out. The flaws affected every operating system Zoom supports: Windows, macOS, Linux, iOS, and Android. So this was not a corner-case issue tucked away on one platform.

A Security cofounder Omer Gull framed the bigger problem as the shrinking barrier to entry. He said attacks like this used to demand a small team and months of work; now, he said, the same result can come from a handful of prompts. And Zoom is an attractive target for exactly the reason most people use it without thinking twice: trust.