Researcher discloses zero-day exploit in Zoom's Mac client that lets any malicious site force a user into a Zoom call with video enabled without user permission (Jonathan Leitschuh/Medium)

Jonathan Leitschuh / Medium:
Researcher discloses zero-day exploit in Zoom's Mac client that lets any malicious site force a user into a Zoom call with video enabled without user permission  —  A vulnerability in the Mac Zoom Client allows any malicious website to enable your camera without your permission.