If something like this has happened to you, you’re enrolled in Zoom's automatic update feature. Launched in its current form in November 2021 for Zoom’s Windows and Mac desktop apps, the feature aims to help users keep up with software patches. But after noticing the feature, longtime Mac security researcher Patrick Wardle wondered whether it was a little too easy. Ultimately, he realized that Zoom’s check could be defeated. Zoom’s signature check was essentially looking at everything on the table and accepting the random birthday card signature instead of actually checking whether the signature was in the right place on the right document.

Source: New York Times August 12, 2022 23:43 UTC