.png "back to home page")
Zhumu has not yet released an update. Apple's silent automatic update, released July 10, does not remove RingCentral + Zhumu servers from Macs.
— nic nguyen (@itsnicolenguyen) July 15, 2019
RingCentral has an update patching the vuln users need to accept. If you've uninstalled RingCentral in the past, there's no easy way to remove the hidden web server. Lyons has detailed a technical fix here: https://t.co/oVb6KqAm9V
— nic nguyen (@itsnicolenguyen) July 15, 2019
RingCentral (and Zhumu, and likely all of Zoom’s white labels) are vulnerable to another, slightly different, RCE. They are not automatically removed by Apple.
— Karan Lyons (@karanlyons) July 15, 2019
CVE-2019-13576 & CVE-2019-13586
Follow these instructions to protect yourself: https://t.co/FVkyBM1efB pic.twitter.com/c66hvGb1wm
#PublicDisclosure of an #RCE in @RingCentral and Zhumu, both are white labels of @zoom_us.
— Jonathan Leitschuh (@JLLeitschuh) July 15, 2019
All other @zoom_us white labels are assumed to be vulnerable.
These are not yet removed by @Apple. https://t.co/I47hV3Rb8t
That Zoom vulnerability that allows attackers to initiate a video-enabled call without user consent? It affects RingCentral and Zhumu customers (both license Zoom) too, researcher @karanlyons found. https://t.co/ldNITQu3lP
— nic nguyen (@itsnicolenguyen) July 15, 2019
The Zoom saga continues. Turns out there are whitelabel apps that use its tech like RingCentral. Apple is silently and automatically patching Macs to patch partner software like it. https://t.co/frvyyaK6Oi
— Dieter Bohn (@backlon) July 16, 2019
Apple is silently updating Macs again to remove insecure software from Zoom’s partners https://t.co/BDi1agbVKk pic.twitter.com/lJjACwQlvS
— The Verge (@verge) July 16, 2019
A) I use Linux B) Only my phone has a camera (for security, several of Dell's business laptops can be ordered without a webcam) C) I hate elites and walled-garden communities: Zoom Spying Vulnerability: The Plot Thickens - Security Boulevard @RiCHi https://t.co/ktRo2qy2Iz
— Christine Hall (@BrideOfLinux) July 16, 2019
Last week, we learned that the @Zoom_us app for #macOS has a nasty bug, allowing a hacker to spy on you. But now we find there are white-label versions that come with the same bug.?
— @Richi Jennings (@RiCHi) July 16, 2019
In today’s #SBBlogwatch at @securityblvd, we switch off all the Macs: https://t.co/6CFDtssYIU
Apple confirmed to BuzzFeed News that it had released another silent update to Macs patching the vulnerability affecting Zoom's partner apps, incl. RingCentral + Zhumu https://t.co/LW71ah4K89
— nic nguyen (@itsnicolenguyen) July 16, 2019
Not Just #Zoom video conferencing software… it’s popular white-labelled rebranded versions — #RingCentral and Zhumu — also install a hidden local web-server on #macOS systems, which are also vulnerable to RCE and WebCam #privacy flawshttps://t.co/JLPTqz01of
— Swati Khandelwal (@Swati_THN) July 16, 2019
PoC Video Released pic.twitter.com/osLtxludkO
A vulnerable web server that gets automatically installed during the setup of certain #Video-#Conference-#Software can allow attackers to turn on users laptop's #Webcam and #Microphone remotely!
— Pirate Security Conference (@PirateSecon) July 16, 2019
An #Alexa with additional video-function, so to say!https://t.co/tHgcBMj6lQ
Zoom’s video conferencing security flaw also applies to RingCentral and Zhumu https://t.co/0tzYMPxe2X pic.twitter.com/aYouoz1DuI
— The Verge (@verge) July 15, 2019
Zoom's scary webcam flaw also affects RingCentral and Zhumu https://t.co/sjQPkZkN7I
— TNW (@thenextweb) July 16, 2019
Zoom's scary webcam flaw also affects RingCentral and Zhumu https://t.co/tInwR3czER
— TNW (@thenextweb) July 16, 2019
Apple은 조용히 macOS를 다시 한 번 업데이트, Zoom 취약점 제거 https://t.co/PTdxNNJrIh
— editoy (@editoy) July 17, 2019
• Apple은 RingCentral 및 Zhumu가 자동으로 설치한 소프트웨어를 제거하기 위해 Mac에 조용한 보안 업데이트를 보냈다고 알려 왔습니다.
Apple is silently updating Macs again to remove insecure software from Zoom’s partners https://t.co/BDi1agbVKk pic.twitter.com/m49T0TCSf8
— The Verge (@verge) July 17, 2019
Zoom RCE Flaw Also Affects Its Rebranded Versions RingCentral and Zhumu https://t.co/ZMy3nGRTxA #Infosec pic.twitter.com/U76eGwK5ER
— #AI (@AI__TECH) July 16, 2019
Zoom’s video conferencing security flaw also applies to RingCentral and Zhumu #tech #irishbiz https://t.co/Dbgkesm6tF
— Trish Hegarty (@iniscomm) July 16, 2019
Zoom's scary webcam flaw also affects RingCentral and Zhumu https://t.co/n0weToV3he
— TNW (@thenextweb) July 17, 2019
Zoom's scary webcam flaw also affects RingCentral and Zhumu https://t.co/q13B7QxxFL
— TNW (@thenextweb) July 17, 2019