‘Zoomsday’ hack uncovered using fewer than 20 AI prompts

Security researchers from A Security have disclosed a critical vulnerability in Zoom’s annotation feature, dubbed 'Zoomsday,' which could allow attackers to remotely hijack a user’s device during a video meeting. The exploit was discovered using fewer than 20 carefully crafted prompts fed into publicly available AI models, highlighting how generative AI can accelerate the discovery of software flaws. Zoom has since issued a patch, but the incident raises concerns about the growing role of AI in both offensive and defensive cybersecurity. The flaw underscores the need for platforms to harden real-time collaboration tools against prompt-driven attack vectors, especially as AI becomes more accessible to malicious actors.