Zoom
-
Zoom and Xerox patch critical Windows and FreeFlow Core flaws that could enable privilege escalation and remote code execution
Zoom and Xerox released patches for critical vulnerabilities in Zoom Clients for Windows and FreeFlow Core, including a high-severity privilege-escalation flaw (CVE-2025-49457) in Windows Zoom clients and two severe flaws in FreeFlow Core (CVE-2025-8355 and CVE-2025-8356) that could enable remote code execution, prompting enterprise patches and risk-mitigation guidance.
-
Cybercriminals Exploit Zoom’s Remote Control Feature to Install Malware
Cybercriminals are exploiting Zoom’s remote control feature to install malware, targeting high-profile individuals through deceptive invitations to participate in podcasts, resulting in significant financial losses.