‘War Dialing’ Tool Exposes Zoom’s Password Problems
Summary: A tool called zWarDial, built by SecKC members including Trent Lo, found roughly 2,400 unprotected Zoom meetings in under 24 hours by scanning 9-to-11-digit Meeting IDs through Tor proxies, with about a 14 percent success rate per attempt and around 100 to 110 meetings found per hour. The exposed meetings belonged to major banks, consulting firms, ride-hailing services, government contractors, and technology and security vendors, and Zoom said it was investigating whether its password-by-default setting failed in edge cases for users unaffiliated with an account owner or administrator.
What's compelling: Only a password defeats the scan, and a single instance of zWarDial can find about 100 open meetings an hour while parallel instances could surface most open Zoom meetings on a given day - so any meeting link shared without a password is discoverable by anyone running the tool.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026