What happened
Analysis and impact
根据 Ars Technica 的报道，漏洞的触发路径围绕 Zoom 的屏幕共享机制展开。研究人员通过 AI 工具的辅助，在极短的时间内完成了从假设到验证的过程，最终确认攻击者可以借助屏幕共享功能对目标设备实施劫持。报道强调，这一过程仅用了不到 20 次提示，显示出 AI 在安全研究领域的效率潜力，同时也暴露出 Zoom 相关功能在特定交互场景下的安全边界问题。
从时间线来看，该报道发布于 2026 年 8 月 12 日，目前公开信息中尚未披露 Zoom 官方是否已发布补丁或修复方案，原文也未提供漏洞的技术细节、受影响版本范围或是否有实际攻击案例发生。Ars Technica 的报道侧重于 AI 工具在漏洞发现环节的加速作用，而非对漏洞本身的完整技术拆解。
这一事件的意义在于它同时指向两个方向：一方面，视频会议工具在远程办公与在线协作中已成为基础设施级别的存在，其屏幕共享等核心功能一旦被滥用，影响面可能相当广泛；另一方面，AI 工具将漏洞发现的门槛与时间成本大幅压缩，这对安全研究而言是效率提升，对防御方而言则意味着漏洞披露与修复之间的窗口期可能进一步缩短。原文未提供 Zoom 方面的回应，相关素材中也未包含针对该漏洞的后续进展或官方声明。
References
Original source text
As AI models gain advanced capabilities to find vulnerabilities in software, develop ways to exploit them, and even carry out autonomous hacking sprees, researchers offered a sobering new example on Tuesday, disclosing vulnerabilities in the video conferencing platform Zoom that could have been exploited to take over targets’ devices. Anyone on a call that involved screen sharing, whether participants or the host, would have been vulnerable to a silent attack that could be carried out with no indication and no interaction from the victim.
Researchers from the digital defense firm A Security say the bug was discovered in early June using publicly available AI models, and that it took fewer than 20 prompts to uncover the vulnerabilities and create a working attack. Zoom issued a security advisory on Tuesday, including details about fixes the company has already begun rolling out to address the flaws, which affected devices running all operating systems that Zoom supports—Windows, macOS, Linux, iOS, and Android.
“What is interesting for us and what we believe is dangerous is the democratization of these capabilities—the barrier to entry is dropping rapidly,” A Security cofounder Omer Gull told WIRED ahead of the disclosure. “Before it would have taken a team of five people maybe six months with a lot of refining and iteration to find this. Now people can reach the same results with under 20 prompts. And Zoom is an important type of target because people assume trust when using it. They don’t see it as a threat.”