20 prompts replaced elite hacker teams to find a Zoom zero-day
security researchers used fewer than 20 ai prompts to uncover a zoom vulnerability allowing total device hijacking, lowering the barrier for sophisticated cyber warfare.
researchers at a security demonstrated that they could replicate a 'nation-state' level zero-day exploit for zoom in a single day using fewer than 20 prompts on publicly available ai models. the vulnerability targeted zoom's annotation tool, allowing an attacker to join a meeting and remotely execute code to steal data, activate cameras or microphones, or install malware without any victim interaction. this discovery signals a drastic reduction in the cost and expertise required to discover critical vulnerabilities, moving from elite government teams to accessible ai agents. zoom has released a patch for the flaw across windows, macos, linux, android, and ios platforms.