Zoom's Linux client continuously monitors the X11 clipboard, capturing everything users copy regardless of whether they interact with Zoom. The privacy issue was discovered and shared on social platforms.
Security researcher Simon Tatham identified that the Zoom Linux client proactively reads all data written to the X11 clipboard system-wide. This occurs regardless of user interaction with Zoom itself, meaning sensitive information like passwords, API keys, or personal data copied elsewhere gets captured by the application.
The behavior stands out as particularly aggressive clipboard monitoring. Most applications only access clipboard data when explicitly pasted into them. Zoom's approach of continuously reading clipboard contents raises significant privacy concerns, especially for users handling sensitive information.
The discovery sparked discussion across tech communities, garnering over 100 upvotes on Mastodon and 31 comments on Hacker News. While the exact purpose remains unclear, clipboard monitoring has historically been used to track user activity or gather data. Users concerned about privacy may need to consider alternatives or implement additional security measures when running Zoom on Linux systems.
A Flock Safety worker called police on an InvestigateTV reporter documenting a public surveillance camera installation. The incident raises questions about transparency in camera deployment and worker protocols.
Threat actors linked to a China-aligned espionage group are exploiting a critical vulnerability in Tencent's Sogou Input Method for Windows to deploy the GrayRabbit backdoor malware.
Revolut disclosed that a limited number of customers had sensitive information exposed through an email-based scam involving an unauthorized third party using a legitimate government email domain.
US schools and police are issuing warnings about a viral social media trend using disturbing and AI-generated versions of Dr. Seuss's Cat in the Hat character to threaten students and communities. Several teenagers have been arrested or charged in connection with the posts.