One researcher, fewer than 20 prompts, one day: a Zoom flaw that only needed you to be in the meeting
Researchers at the firm A Security disclosed a chain of memory-corruption bugs in Zoom's annotation feature — the tool that lets meeting participants draw on shared content — that allowed code execution on another participant's machine with no clicks, no downloads and no interaction of any kind from the victim. They confirmed the exploit against Zoom client version 7.0.5 on Windows, macOS, iOS and Android. What has drawn attention is not the bug but its price: the team says a single researcher produced a working exploit in under 24 hours using fewer than 20 prompts to publicly available AI models, work they estimate would previously have taken a team of five around six months. Zoom has issued fixes; users on old clients are still exposed.
Why it mattersThe immediate action is small and worth doing today: update Zoom on every device you use it on, including the phone. The larger point is that this is a measurement rather than an assertion. People have been saying for two years that AI lowers the cost of finding exploitable bugs; here is a specific chain, a specific product and a specific before-and-after — roughly thirty person-months compressed into one person-day. Defenders' patch cycles are still measured in weeks. That gap is the story.
▶ Related video: Zoom Cracked With 20 AI Prompts — The Zoomsday Exploit
Read in the app — free, in 9 languages
Related stories
Apple Music will tell you when a song was made by a machine — but the uploader decides whether to say so2026-08-21Stripe has just paid $7.5 billion for a model router. Days later Ramp built one and is giving it away until January.
2026-08-21Meta's assistant is now a Mac app that reads your screen and types into any window — and what it sees can train the model
2026-08-21One click on a news site now tells Google to show you more of it — and you stay on the page you were reading
2026-08-21Adobe will now generate the music, the voiceover and the door slam — and it says the licence covers you
2026-08-21