ZOOMSDAY: Zoom Zero-Click Vulnerabilities Via Annotation
Summary
The article reports a critical, nation-state-grade zero-click RCE vulnerability in Zoom's annotation feature exploited by AI-assisted research. It details CVEs 2026-53413, 2026-53414 and 2026-53415, the cross-platform impact, and the coordinated mitigation timeline. It emphasizes patching, reducing attack surface, and the importance of endpoint protection and ongoing monitoring for SMBs.