Technologies
Zoom privacy risks: The video chat app could be sharing more information than you think
Zoom makes video chatting with colleagues easy, but you might be giving away more than you bargained for.
The Zoom video meeting and chat app skyrocketed in popularity as millions of people looked for new ways to work, study and socialize amid the coronavirus pandemic. With the option to customize your background and newer features such as Immersive View and a vanishing pen tool, it’s easy to see why Zoom’s popularity isn’t dwindling even as COVID-19 vaccines and booster shots roll out and offices become hybrid workplaces. But with all that popularity, comes privacy risks.
From built-in attention-tracking features (which have since been disabled) to exploitable software bugs and issues with “Zoom-bombing” (where uninvited attendees break into and disrupt meetings) — Zoom’s security practices have drawn scrutiny from users worldwide. New York’s Attorney General Letitia James sent Zoom a letter outlining privacy vulnerability concerns in March 2020. The Electronic Frontier Foundation also cautioned users working from home about the software’s onboard privacy features.
Read more: 20 Zoom video chat tips, tricks and hidden features
Privacy experts previously expressed concerns about Zoom in 2019, when the video-conferencing software experienced both a webcam hacking scandal, and a bug that allowed snooping users to potentially join video meetings they hadn’t been invited to, if those meetings were not protected with a password.
The issues exacerbated by widespread adoption at the start of the pandemic were just the latest chapter in the software’s rocky security history, and prompted Zoom CEO Eric Yuan to respond to concerns in April 2020, freezing feature updates to address security issues over a 90-day update rollout. Though Zoom has since added security features like end-to-end encryption, there are still a few things you should watch out for to keep your chats as private as possible.
Here are some of the privacy vulnerabilities in Zoom that you should watch out for.
Zoom’s cloud recording feature might share meeting video with people outside the call
For paid subscribers, Zoom’s cloud recording feature can either be a life-saver or a catastrophic faux pas waiting to happen. If the feature is enabled on the account, a host can record the meeting along with its text transcription and a text file of any active chats in that meeting, and save it to the cloud where it can later be accessed by other authorized users at your company, including people who may have never attended the meeting in question. Yikes.
As Mashable’s Jack Morse put it, “What that suggests, but doesn’t clarify, is that for non-webinar/standard meetings, your person-to-person chat messages would be later sent to your boss after a call recorded to the cloud.”
Zoom does allow a narrowing of the audience here, however. Administrators can limit the recording’s accessibility to only certain preapproved IP addresses, even if the recording has already been shared. Participants can also see when a meeting is being recorded.
Read more: The best VPN services for 2021
Zoom even shared information with Facebook
By now, you’re used to hearing it from the privacy-minded: Don’t use Facebook to log in to other sites and software unless you want Facebook to have data on what you’re doing. Fair enough. But what to do when Zoom gets caught sending some of your analytics data to Facebook — whether or not you even have a Facebook account?
An analysis by Vice’s Motherboard found the iOS version of the Zoom app doing exactly that. Courtesy of Facebook’s Graph API, Zoom was telling Facebook whenever you opened the Zoom app, what phone or device you were using, and your phone carrier, location and a unique advertising identifier. Motherboard also reported that Zoom had updated its iOS app so the app would stop sending certain data to Facebook.
In a March 2020 blog post, Zoom addressed the issue, noting “our customers’ privacy is incredibly important to us, and therefore we decided to remove the Facebook SDK in our iOS client and have reconfigured the feature so that users will still be able to log in with Facebook via their browser.”
As late as March 2020, Zoom’s privacy policy contained some breezy language about its relationship to third-party data crunchers, which gives one reason to question where else — and to what extent — that data was being shared or sold that we didn’t know about.
“Zoom does use certain standard advertising tools which require Personal Data (think, for example, Google Ads and Google Analytics). We use these tools to help us improve your advertising experience (such as serving advertisements on our behalf across the Internet, serving personalized ads on our website, and providing analytics services),” the policy said at the time. “Sharing Personal Data with the third-party provider while using these tools may fall within the extremely broad definition of the ‘sale’ of Personal Data under certain state laws because those companies might use Personal Data for their own business purposes, as well as Zoom’s purposes.”
But at the end of March, Zoom updated its privacy policy. In a statement following the move, Zoom said that while it wasn’t changing any of its actual practices, it wanted to make its language clearer. Regarding its relationship to third-party data handlers described above, the company drew a line in the sand between its product and its website. “This only pertains to user activity on the zoom.us website. No data regarding user activity on the Zoom platform — including video, audio, and chat content — is ever provided to third parties for advertising purposes,” the company said.
You should probably review your Zoom and device security settings with an eye toward minimizing permissions, and make sure any anti-tracking software on your device is up to date and running.
It may not help, but it can’t hurt.
It’s also important to keep your Zoom app up to date so your privacy is always protected with the latest security patches. Luckily, Zoom recently rolled out a new automatic update feature that makes this process a whole lot more convenient.
For more, check out how to use the sneaky Zoom Escaper tool to get out of your meetings, how to combat Zoom anxiety and Zoom fatigue, and how to make your video meetings a little less weird. And, does Zoom’s free plan have ads now?
Technologies
Trump says MAGA Inc. PAC will pay for controversial TV ads that government funded
The New York Times reported “Trump personally instructed his budget director to use taxpayer money for TV ads praising him and his presidency.”
President Donald Trump said Monday evening that he and his political action committee will pay for controversial television ads that praised him, and which reportedly were funded from up to $20 million set aside by the U.S. Department of Homeland Security.
The White House later clarified that the super PAC â MAGA Inc. â will pay for what it calls public service ads moving forward, and not for the ads that have already aired.
Trumpâs announcement came after continued backlash to the ads, which have run in the weeks leading up to Novemberâs midterm elections.
Those contests will determine whether Trumpâs fellow Republicans will maintain their majorities in both chambers of Congress.
Critics say the ads mirror Republican campaign talking points. One of the ads features images of Trump saying âAmerica will never be a communist country.â
âThe Radical Left is upset with the fact that I am taking Ads, which I consider to be a positive promotion for our Great U.S.A., and paying for them with U.S.A. money,â Trump said in a post on Truth Social on Monday.
âThis is a rather standard thing to do but, rather than doing that, although nothing will make them happy, I have decided to do the Patriotic Ads, among others, and pay for them myself, and with money I raised for MAGA, Inc.,â Trump said.
AdImpact has tracked roughly $9.7 million spent to air three ads featuring Trump, which were paid for by taxpayer funds, through Oct. 5.
Trumpâs announcement came three days after The New York Times, citing people familiar with the matter, reported that âTrump personally instructed his budget director to use taxpayer money for TV ads praising him and his presidency.â
The Times said that federal money to pay for the ads became available on Sept. 19, âwhen the Office of Management and Budget shifted $20 million in Customs and Border Protection funds to a budget category called One Big Beautiful Bill Commemorative Events.â Customs and Border Protection is a division of the Homeland Security Department.
Sen. Maggie Hassan, D-N.H., in a Sept. 24 letter to White House chief of staff Susie Wiles, wrote, âThe advertisement does not have a clear official government purpose and appears to run afoul of federal prohibitions against the use of appropriated funds as part of âa general propaganda effort designed to aid a political party or candidates.ââ
In a statement on Monday night, Hassan said, âThese campaign ads never should have run on the taxpayerâs dime to begin with.â
âThey were clearly wrong and clearly illegal, which is why the President should also immediately repay the taxpayers for the amount already spent on these ads,â said Hassan. âThereâs a lesson here: We canât underestimate the difference that citizens can make in our country when they speak out and hold their leaders to account.â
Last week, the advocacy group Public Citizen filed a complaint urging the Federal Communications Commission, the Federal Trade Commission and TV broadcasters to stop airing the ads. Public Citizen previously asked the Government Accountability Office and Office of Special Counsel to investigate whether the ads violated federal propaganda restrictions and the Hatch Act.
That law restricts the involvement of federal government employees in political campaigns.
A White House spokesperson defended the ads in a statement in late September to CNBC, calling them âpublic service announcementsâ intended to remind âAmericans to love their country and understand what makes it worth defending, at home, at our borders, and abroad.â
âThe ad is educational and unapologetically patriotic. We should be proud of our country,â the spokesperson said.
MAGA Inc. has raised $424.4 million and spent $32.4 million during the 2025-26 cycle through Aug. 31, leaving the Trump Super PAC with $415.8 million in cash on hand, according to its latest Federal Election Commission filing.
MAGA Inc. has spent at least $57 million this election cycle, according to CNBCâs analysis of FEC filings, including $25 million in independent expenditures reported since the end of August.
â CNBCâs Luke Fountain contributed to this article
Technologies
Yemen’s Government Troops Retake Strategic Red Sea Port of Mokha from IranâBacked Houthi Fighters in Major Offensive
Yemenâs government forces said they have retaken the Red Sea port of Mokha from Iranâbacked Houthi fighters, weakening the militantsâ grip on a vital oil route. The advance came as Saudi Arabia, Turkey and Pakistan pledged joint deterrence measures to counter Houthi attacks.
Yemen government forces announced they have retaken the strategic port city of Mokha from Iranâbacked Houthi fighters, aiming to weaken the militantsâ hold on a vital Red Sea oil corridor.
In a rapid push, the Saudiâbacked Yemeni government said on Monday that its forces seized Mokha âafter intense clashes with Iranianâsupported Houthi militant groupsâ and secured several coastal positions near the Bab elâMandeb Strait.
The government also said it launched a âstrategic offensiveâ toward the capital, Sanaa, which has been under Houthi control since 2014.
Verum could not independently verify the claims. The Houthis have reportedly denied that Mokha has fallen.
Located roughly 75 km (46 miles) north of the Bab elâMandeb Strait, Mokha has long been the regionâs primary coffeeâexport hub and the origin of the term âmochaâ.
Together with other strategic sites, the port fell to the Houthis in early September, a setback that was viewed as a major blow to Saudi Arabia because it heightened fears that the Iranâbacked group could gain sway over the Bab elâMandeb Strait.
Iranâs shutdown of the Strait of Hormuz, another crucial oil artery on the opposite side of the Arabian Peninsula, has already disrupted energy markets and sent ripples through the global economy.
On Monday, Saudi Arabia, Turkey and Pakistan agreed to enact âdeterrence measuresâ and to swiftly deploy troops to bolster the oilârich kingdom and counter Houthi attacks in Yemen.
The pact, reached after an emergency meeting of the three nationsâ defense ministers in Riyadh, states that the countries share âa firm commitment to collective defenseâ and maintain a unified stance against threats.
Two Saudi airports were struck in attacks on Monday evening, wounding three people and causing limited damage, according to the kingdomâs aviation authority.
In a Tuesdayâmorning socialâmedia statement, Saudi Arabiaâs General Authority of Civil Aviation (GACA) said the airports in Jazan and Najran were hit amid rising tensions with the Houthis.
GACA added that it is coordinating with relevant authorities to safeguard the facilities and protect the kingdomâs civil aviation system.
Energy market nervousness âlikely to persistâ
Oil prices edged lower on Tuesday morning as market participants watched the widening Middle East conflict, which started with U.S. and Israeli strikes on Iran in late February.
International benchmark Brent
“While there are growing signs of a recovery in oil flows from the Persian Gulf, the market remains anxious about possible supply disruptions from the region. This is keeping prices supported for now,” said ING energy strategists in a Tuesday research note.
“Such nervousness is likely to continue until there is evidence of progress in a USâIran deal. Meanwhile, the risk of further escalation remains very real,” they added.
Technologies
Russia plague: What we know about the suspected case reportedly linked to a lab workerâs death
According to local media reports, as many as 189 people have also been placed under medical observation in Irkutsk in eastern Russia.
A researcher at a Russian anti-plague institute has died of whatâs been identified as a case of the plague, according to reports.
Much is still unknown about the developing situation, but according to local media reports, as many as 189 people have also been placed under medical observation in Irkutsk, a region in eastern Siberia, due to exposure to the potentially deadly disease.
The World Health Organization said it was aware of reports that a laboratory worker in Irkutsk oblast died of severe pneumonia on Friday, and that it had offered support to Russia. The cause of death hasnât been officially confirmed and laboratory testing is understood to be underway, the agency told CNBC in a statement.
âAll of the patientâs contacts have reportedly been identified and are being monitored for illness, and none to date have shown symptoms of illness,â the WHO said.
What is the plague and how does it spread?
Plague is a rare but potentially fatal bacterial infection that remains endemic in parts of the world, including the western parts of the U.S., but can be treated with antibiotics if identified quickly. Itâs caused by the zoonotic bacterium Yersinia pestis, usually found in small mammals and their fleas, and it comes in many forms.
Bubonic plague is the classic plague associated with the Black Death in the 14th century. Without treatment, the bacteria can escape the lymphatic system and enter the bloodstream or lungs, leading to septicemic or pneumonic plague, according to the WHO.
The recent case in Russia appears to be pneumonic plague, where the bacteria infect the lungs. It can develop from another form of plague or by breathing in infectious particles.
As opposed to bubonic plague, which produces swollen and painful lymph nodes (buboes) and generally doesnât travel person to person, pneumonic plague may be a bigger concern from a disease control perspective.
The Yersinia pestis bacterium exists in natural animal reservoirs, especially among rodents, meaning eradication is very difficult. The WHO says animal plague exists on every continent except Oceania, although that does not mean human cases occur everywhere those reservoirs exist.
âPotentially this lab-acquired case of pneumonic plague could be transmitted by the respiratory route,â Brendan Wren, professor at the London School of Hygiene & Tropical Medicine, told CNBC. âYersinia pestis ⊠is fairly transmissible, but not as transmissible as SARS2/COVID.â
Whatâs happening with the suspected case in Russia?
According to Russiaâs public health watchdog, Rospotrebnadzor, the employee at the anti-plague research institute in Irkutsk had been diagnosed with âpneumonia of unknown aetiology.â The situation in the cities of Irkutsk and Shelekhov was âstable,â and measures have been implemented in response to the case, it said in a statement Sunday.
Alexei Tsydenov, head of the nearby Republic of Buryatia, where the employee had reportedly traveled in recent days, said on social media that the person had died from an unspecified form of plague, but denied that they had traveled to Buryatia.
CNBC has not been able to independently verify the reports. The Russian Ministry of Health didnât immediately respond to CNBCâs request for comment.
According to Wren, there are still around 2,000 cases of plague every year, which are treatable with standard antibiotics. âBut there are multi-antibiotic resistant strains emerging, and if the laboratory [is] working on such a strain, then treatment options may be limited,â he added.
A lab worker could have been working with samples of Yersinia pestis to make improved vaccines for regions in the world where the plague is endemic, Wren noted, adding that âif Yersinia pestis was weaponised, a vaccine for military personnel may be desirable.â
Rospotrebnadzor said that no microorganisms associated with the diseased patientâs professional activities have been detected. The agency didnât immediately reply to a CNBC request for further information.
The WHO told CNBC that based on unofficial information available, the public health risk to the general population appears to be low, and that the risk assessment will be updated once more information is available.
â CNBCâs Jenny Lee contributed to this report.
-
Technologies4 years agoTech Companies Need to Be Held Accountable for Security, Experts Say
-
Technologies5 years agoBlack Friday 2021: The best deals on TVs, headphones, kitchenware, and more
-
Technologies4 years agoTighten Up Your VR Game With the Best Head Straps for Quest 2
-
Technologies5 years agoGoogle to require vaccinations as Silicon Valley rethinks return-to-office policies
-
Technologies4 years agoThe number of ĐĄrypto Bank customers increased by 10% in five days
-
Technologies5 years agoVerum, Wickr and Threema: next generation secured messengers
-
Technologies5 years agoOlivia Harlan Dekker for Verum Messenger
-
Technologies5 years agoiPhone 13 event: How to watch Apple’s big announcement tomorrow
