AI Engineer - Learn how to integrate AI into software applications
2,000+ Free Courses with Certificates: Coding, AI, SQL, and More
Overview
AI, Data Science & Cloud Certificates from Google, IBM & Meta — 40% Off
One plan covers every Professional Certificate on Coursera. 40% off Coursera Plus Annual.
Unlock All Certificates
Explore a critical security analysis of Zoom's "Zero Touch Provisioning" method in this 31-minute Black Hat conference talk. Delve into the vulnerabilities of cloud communication platforms when integrated with traditional endpoints like desk phones and analog gateways. Discover how centralized configurations and firmware in provisioning services can be exploited for remote attacks. Learn about the potential risks associated with certified hardware in Zoom's ecosystem. Gain insights into the intersection of modern cloud communication and legacy hardware, and understand the implications for organizational security. Presented by Moritz Abrell, this talk offers valuable information for cybersecurity professionals, IT administrators, and anyone involved in implementing or managing cloud communication systems.
Syllabus
Zero-Touch-Pwn: Abusing Zoom's Zero Touch Provisioning for Remote Attacks on Desk Phones
Taught by
Black Hat