A zero-day remote code execution vulnerability in Microsoft Office has come to light, and is considered very serious due to potential for code execution if a victim opens a malicious document in Word.
Zhenhua data leak reveals that the firm with links to the Chinese military has scraped the personal data of at least 2.4 million targeted subjects, including national leaders, celebrities, and politically exposed persons.
A surge in mobile threats continues to impact mobile-powered businesses, with 43% of all compromised devices fully exploited, marking a 187% year-over-year increase.
Zoom's plan for AI data collection is apparently to scrape it from internal customer activity. The March TOS update changed the platform terms to announce that Zoom reserved the right to use platform video, audio and chat content to train AI models.
Zoom has decided to enable end-to-end encryption for all users including the free users and those subscribed to individual pro plan, provided they give up additional personal information.
Zoom claimed that end-to-end encryption will only be available as a premium paid feature so that law enforcement can have access to people who are using the platform for bad purposes.
At a rate of about two million additional active users per month, Zoom privacy issues on the platform’s data collection policies, vulnerabilities and monitoring tools are gaining attention.
Zoom faces lawsuits accusing the company of covering up serious privacy and security issues as they onboard millions of new users due to the coronavirus crisis.
