NCC reveals new ways attackers exploit Zoom, offers advice

user_icon NCC reveals new ways attackers exploit Zoom, offers advice Posted by: NOTICE.COM.NG Staff
calendar-icon NCC reveals new ways attackers exploit Zoom, offers advice Posted on: 2022-09-22 21:46:36
NCC reveals new ways attackers exploit Zoom, offers advice PJIMAGE-15119501



The Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has advised users of videotelephony platform, Zoom, to install the latest update of the software from its publisher's official website following the discovery of vulnerabilities that allows a remote attacker to exploit the app.

In an advisory issued on Wednesday, NCC-CSIRT reported that the Indian Computer Emergency Response Team (CERT-In) found several flaws in the Zoom product.

The videotelephony platform became popular for virtual meetings in the wake of the COVID-19 Pandemic with more than 300 million daily users.

DO YOU KNOW >>> Pope Francis begs Putin to end ‘spiral of violence, death’ in Ukraine

According to the NCC-CSIRT advisory, "A remote attacker could exploit the vulnerabilities to circumvent implemented security measures and cause a denial of service on the targeted machine."

It noted that "These vulnerabilities exist owing to incorrect access control implementation in Zoom On-Premises Meeting Connector MMR prior to version 4.8.20220815.130.

“A remote attacker could exploit these flaws to join a meeting they were not permitted to attend without being seen by the other attendees.

READ ALSO >>> NCC urges firmware update after Lenovo found high vulnerabilities in own products

“They can also access audio and video feeds from meetings they were not permitted to attend, as well as interrupt other sessions."

Successful exploit of these vulnerabilities could allow an unauthorized remote authenticated user to bypass implemented security limitations on the targeted system.

The Computer Security Incident Response Team (CSIRT) is the telecom sector's cyber security incidence centre set up by the NCC to focus on incidents in the telecom sector and as they may affect telecom consumers and citizens at large.

WATCH >>> Peter Obi Net Worth 2022, Biography, Cars And Houses

The CSIRT also works collaboratively with the Nigeria Computer Emergency Response Team (ngCERT), established by the Federal Government to reduce the volume of future computer risks incidents by preparing, protecting, and securing Nigerian cyberspace to forestall attacks, and problems or related events.


WATCH >>> Download Nollywood Movie: Selina Tested (Episode 28, Endgame B) FINAL

WATCH >>> Obi Cubana and E money Net Worth 2022s & Cars - Who is richer?

BREAKING >>> You've Fernandes, two others, couldn't play - Guardiola criticizes Man Utd - EPL

READ ALSO >>> Price of 2016 Mercedes Benz GLC 300 in Nigeria - Reviews and Buying Guide


For All Nigeria Past Questions Visit www.QUESTION.NG

Kindly share this post on different Social Media below


Tags:


COMMENTS

NOTE: User comments in this section are, as the name implies, provided by users of this website. The question.ng team is not responsible for, nor do they endorse, any of the information provided here.


NO POSTED COMMENT