We've typed many words about how the industry-standard 90-day security bug disclosure window is effectively dead and gone with the advent of AI-assisted exploiting. Illustrating that point rather poignantly, researchers at A.Security easily came up with Zoomsday. This exploit let any participant in a Zoom meeting gain control over the device of anyone else, all without them being any wiser.
The team claims it cooked the exploit with merely 20 prompts to an AI agent. The exploitable area is substantial, as recent estimates pin Zoom's monthly active users at around 220 million and an estimated 56% of the global conferencing market share.
