https://cybersecuritytracker.ai/?stack=1Stories and vulnerabilities involving Zoom.Sun, 26 Jul 2026 22:32:52 GMThttps://thehackernews.com/2026/07/bluenoroff-zoom-phishing-kit-profiles.htmlcst-3180North Korean threat actors known as BlueNoroff are running phishing campaigns that impersonate Zoom and Microsoft Teams to deliver malware, leveraging typosquatted domains and compromised industry contacts. The group profiles cryptocurrency wallets during the social engineering process before distributing malicious payloads to targets.Fri, 24 Jul 2026 15:12:35 GMThttps://schneier.com/blog/archives/2026/07/mit-to-become-hotbed-of-ai-video-surveillance.htmlcst-2913MIT is installing over 500 AI-equipped surveillance cameras across campus buildings, residence halls, and outdoor areas between November 2025 and September 2026, with a budget exceeding $3 million. The cameras use deep learning to perform real-time facial recognition, object classification, and behavioral detection including motion, loitering, and crowd identification. Collected data is retained for up to 30 days unless an exception applies.Tue, 21 Jul 2026 11:07:13 GMThttps://techcrunch.com/2026/07/17/the-zoom-hack-that-says-dont-record-mecst-2788A commentary on the proliferation of recording and transcription features in video conferencing platforms like Zoom, questioning whether ubiquitous automated transcription and summarization serves practical value or creates information overload.Fri, 17 Jul 2026 21:20:47 GMThttps://tenable.com/blog/black-hat-2026-swarm-event-build-AI-security-agentscst-2687Tenable is hosting Swarm, a collaborative build event at Black Hat 2026 where security practitioners will develop open-source AI agents and tools together. The event aims to address isolated development of agentic AI in security teams by fostering community collaboration on agents, skills, and model context protocol servers to improve collective cyber defenses.Thu, 16 Jul 2026 13:00:00 GMThttps://securityweek.com/splunk-zoom-patch-critical-vulnerabilitiescst-2681Splunk and Zoom released patches for critical vulnerabilities that could enable attackers to obtain credentials, access data, take over user accounts, and elevate privileges.Thu, 16 Jul 2026 10:54:34 GMThttps://bleepingcomputer.com/news/security/russian-hackers-trojanize-webex-zoom-apps-to-push-starland-malwarecst-2650A Russian financially motivated threat actor identified as UAT-11795 is distributing trojanized versions of WebEx and Zoom applications to deliver Starland RAT, a new backdoor designed to steal credentials and cryptocurrency.Thu, 16 Jul 2026 10:19:34 GMThttps://blog.talosintelligence.com/uat-11795-deploys-novel-starland-rat-and-bespoke-wldr-c2-implant-in-financially-motivated-campaigncst-2666Cisco Talos identified UAT-11795, a Russian-speaking financially motivated threat actor conducting campaigns since at least June 2025 against victims in the U.S. and Europe. The group deploys Starland RAT, a Python-based remote access tool, alongside WLDR, a sophisticated PowerShell-based command-and-control implant featuring encrypted beaconing and task queuing capabilities. The actor distributes trojanized installers of legitimate software such as MobaXterm, WebEx, Zoom, and DBeaver to establish persistence and steal credentials and cryptocurrency assets.Thu, 16 Jul 2026 10:00:01 GMThttps://bleepingcomputer.com/news/security/zoom-warns-of-critical-account-takeover-vulnerabilitycst-2633Zoom disclosed a critical vulnerability affecting its Windows desktop client and SDK that allows unauthenticated attackers to take over user accounts. The flaw poses a direct risk to Zoom meeting participants and administrators who have not yet patched their systems.Wed, 15 Jul 2026 20:16:02 GMThttps://cloud.google.com/blog/topics/threat-intelligence/targeted-campaign-us-law-firmscst-309UNC3753, a financially motivated threat group, conducted a data theft extortion campaign from January through May 2026 targeting US law firms and professional services organizations. The group used voice phishing and social engineering to trick employees into downloading remote access tools, then either searched systems directly or manipulated victims into stealing sensitive data like legal agreements and financial records for extortion. In some cases, actors physically entered corporate offices posing as IT technicians to extract data via USB media.Fri, 05 Jun 2026 14:00:00 GMThttps://research.checkpoint.com/2026/fast-and-furious-nimbus-manticore-operations-during-the-iranian-conflictcst-600Nimbus Manticore, an Iranian IRGC-affiliated threat actor, resurfaced during escalated US-Iran military tensions in early 2026 with enhanced capabilities including a new backdoor called MiniFast and novel delivery techniques. The group conducted phishing campaigns targeting aviation and software sector employees across the United States, Europe, and the Middle East, employing methods such as SEO poisoning, AppDomain hijacking, and abuse of legitimate Zoom installers. The malware development appeared to incorporate AI-assisted practices, enabling rapid tool adaptation and sustained operational activity.Fri, 22 May 2026 15:09:29 GMThttps://labs.watchtowr.com/the-internet-is-falling-down-falling-down-falling-down-cpanel-whm-authentication-bypass-cve-2026-41940cst-560cPanel & WHM, which manages over 70 million domains, contains an authentication bypass vulnerability (CVE-2026-41940) affecting all currently supported versions. The flaw in session loading and saving mechanisms has been exploited in the wild as a zero-day, and cPanel has released patches across multiple version tracks (110.0.x through 136.0.x) to address the issue.Wed, 29 Apr 2026 17:19:19 GMT