Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Compliance

Zoom Agrees to Step Up Security After New York Probe

New York state’s top prosecutor on Thursday announced that the company Zoom would improve security measures, after flaws were detected as the video conferencing platform soared in popularity amid the coronavirus pandemic.

New York state’s top prosecutor on Thursday announced that the company Zoom would improve security measures, after flaws were detected as the video conferencing platform soared in popularity amid the coronavirus pandemic.

The agreement wraps an investigation launched in March by New York Attorney General Letitia James into vulnerabilities in the California-based company’s software.

In a statement, James said Zoom would institute new security measures for the millions of users using the platform, including enhanced privacy controls.

The company also agreed to conduct regular risk assessment and software code reviews to detect vulnerabilities.

The number of daily video meetings on Zoom skyrocketed from 10 million in January to more than 300 million at the end of April.

But a “Zoom-bombing” phenomenon sparked warnings about lax security, as virtual intruders interrupted religious ceremonies, remote classes and other Zoom gatherings.

In some cases, pornographic images popped up.

James said Zoom would take steps to prevent those breaches as well as end its user data-sharing partnership with Facebook.

Advertisement. Scroll to continue reading.

The platform is to improve privacy controls for free accounts — users avoid a monthly fee for meetings 40 minutes and under — along with education accounts for K-12 students.

All hosts will now be able to control access to conferences with a required password for those attempting to access a meeting.

“Our lives have inexorably changed over the past two months, and while Zoom has provided an invaluable service, it unacceptably did so without critical security protections,” James said in the statement.

“This agreement puts protections in place so that Zoom users have control over their privacy and security.”

Related: Zoom Acquires Keybase to Bring End-to-End Encryption to Video Platform

Related: Keys Used to Encrypt Zoom Meetings Sent to China

Related: Trojanized Zoom Apps Target Remote Workers

Written By

AFP 2023

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Kim Larsen is new Chief Information Security Officer at Keepit

Professional services company Slalom has appointed Christopher Burger as its first CISO.

Allied Universal announced that Deanna Steele has joined the company as CIO for North America.

More People On The Move

Expert Insights

Related Content

Application Security

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.

Cybercrime

A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...

CISO Strategy

SecurityWeek spoke with more than 300 cybersecurity experts to see what is bubbling beneath the surface, and examine how those evolving threats will present...

CISO Conversations

Joanna Burkey, CISO at HP, and Kevin Cross, CISO at Dell, discuss how the role of a CISO is different for a multinational corporation...

CISO Conversations

In this issue of CISO Conversations we talk to two CISOs about solving the CISO/CIO conflict by combining the roles under one person.

CISO Strategy

Security professionals understand the need for resilience in their company’s security posture, but often fail to build their own psychological resilience to stress.

Data Breaches

LastPass DevOp engineer's home computer hacked and implanted with keylogging malware as part of a sustained cyberattack that exfiltrated corporate data from the cloud...