Vulnerability Spotlight: Zoom Communications user enumeration
Summary: Cisco Talos disclosed a user enumeration vulnerability in Zoom Communications that let any authenticated user send a crafted XMPP message to request the contact list of an arbitrary registration domain, returning autogenerated XMPP usernames plus first and last names. The flaw stemmed from missing validation that the requesting user belonged to the queried domain, and Talos said the issue appeared patched at publication with no CVE assigned because it was a server-side cloud issue.
Key Takeaway: The returned directory, combined with other XMPP queries, could expose email addresses, phone numbers and vCard details - enough to fuel a spear-phishing campaign that dumps every Zoom user's email in an organization, aimed at staff who had just installed remote-work software for the first time.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026