{"id":8914,"date":"2022-09-30T14:04:57","date_gmt":"2022-09-30T14:04:57","guid":{"rendered":"https:\/\/techandbiz.com.ng\/tab-backup\/?p=8914"},"modified":"2022-09-30T14:05:30","modified_gmt":"2022-09-30T14:05:30","slug":"zoom-users-advised-to-update-software-after-vulnerabilities-found","status":"publish","type":"post","link":"https:\/\/techandbiz.com.ng\/tab-backup\/2022\/09\/30\/zoom-users-advised-to-update-software-after-vulnerabilities-found\/","title":{"rendered":"Zoom Users Advised to Update Software After Vulnerabilities Found"},"content":{"rendered":"<p><b>\u00a0<\/b><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><span lang=\"EN-GB\">The Nigerian Communications Commission&#8217;s Computer Security Incident Response Team (NCC-CSIRT) <\/span>has advised users of <span lang=\"EN-GB\">videotelephony\u00a0<\/span>platform, <span class=\"il\">Zoom<\/span>, to install the latest update of the software from its publisher\u2019s official website following the discovery of vulnerabilities that allows a remote attacker to exploit the app.<\/p>\n<p>&nbsp;<\/p>\n<p>In advisory issued on Wednesday, NCC-CSIRT reported that the Indian Computer Emergency Response Team (CERT-In) found several flaws in <span class=\"il\">Zoom<\/span> product.<\/p>\n<p>&nbsp;<\/p>\n<p>The videotelephony platform became popular for virtual meetings in the wake of the COVID-19 Pandemic with more than 300 million daily users.<\/p>\n<p>&nbsp;<\/p>\n<p>According to the NCC-CSIRT advisory, \u201cA remote attacker could exploit the vulnerabilities to circumvent implemented security measures and cause a denial of service on the targeted machine.\u201d<\/p>\n<p>&nbsp;<\/p>\n<p>It noted that \u201cThese vulnerabilities exist owing to incorrect access control implementation in <span class=\"il\">Zoom<\/span> On-Premises Meeting Connector MMR prior to version 4.8.20220815.130. A remote attacker could exploit these flaws to join a meeting they were not permitted to attend without being seen by the other attendees. They can also access audio and video feeds from meetings they were not permitted to attend, as well as interrupt other sessions.\u201d<\/p>\n<p>&nbsp;<\/p>\n<p>Successful exploit of these vulnerabilities could allow an unauthorized remote authenticated user to bypass implemented security limitations on the targeted system.<\/p>\n<p>&nbsp;<\/p>\n<p><span lang=\"EN-GB\">The Computer Security Incident Response Team (CSIRT) is the telecom sector\u2019s cyber security incidence centre set up by the NCC to focus on incidents in the telecom sector and as they may affect telecom consumers and citizens at large. The CSIRT also work collaboratively with the Nigeria Computer Emergency Response Team (ngCERT), established by the Federal Government to reduce the volume of future computer risks incidents by preparing, protecting, and securing Nigerian cyberspace to forestall attacks, and problems or related events.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u00a0 &nbsp; &nbsp; The Nigerian Communications Commission&#8217;s Computer Security Incident Response Team (NCC-CSIRT) has advised users of videotelephony\u00a0platform, Zoom, to install the latest update of the software from its publisher\u2019s official website following the discovery of vulnerabilities that allows a remote attacker to exploit the app. &nbsp; In advisory issued on Wednesday, NCC-CSIRT reported that [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":8899,"comment_status":"open","ping_status":"open","sticky":true,"template":"","format":"standard","meta":{"footnotes":""},"categories":[82,83,334],"tags":[],"class_list":["post-8914","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology","category-technology-trends","category-telecoms"],"_links":{"self":[{"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/posts\/8914","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/comments?post=8914"}],"version-history":[{"count":0,"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/posts\/8914\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/media\/8899"}],"wp:attachment":[{"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/media?parent=8914"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/categories?post=8914"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/tags?post=8914"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}