The warning was issued on Monday by the NITDA Computer Emergency Readiness and Response Team (NITDA-CERRT) in an advisory on the vulnerability tracked as CVE-2026-53412.

NITDA-CERRT advised users to update affected Zoom applications immediately and implement additional security measures, including multi-factor authentication (MFA).

According to the agency, the vulnerability is caused by improper input validation and can be exploited remotely over a network without requiring authentication.

“The vulnerability is caused by improper input validation and could allow an unauthenticated attacker to remotely compromise Zoom user accounts over a network without requiring valid credentials,” NITDA-CERRT said.

The agency warned that successful exploitation could give attackers unauthorised access to confidential meetings, chat conversations, recordings and shared files.

“If exploited, attackers could take over Zoom user accounts without authorization, access confidential meetings, chat conversations, recordings and shared files,” the advisory said.

NITDA-CERRT said the vulnerability affects Zoom Workplace for Windows and the Zoom Workplace VDI Client for Windows.

The agency warned that compromised accounts could expose sensitive organisational, government and personal information. Attackers could also impersonate legitimate users to conduct phishing, fraud and social engineering attacks.

NITDA-CERRT advised users of Zoom Workplace for Windows to upgrade to version 7.0.0 or later.

Users of Zoom Workplace VDI Client for Windows were advised to upgrade to version 7.0.10, 6.6.15, 6.5.18 or later, depending on their supported release branch.

The agency also urged organisations to verify that all Zoom desktop clients are running supported versions and maintain effective patch management processes to ensure security updates are deployed promptly.

NITDA-CERRT recommended enabling MFA across Zoom accounts and restricting administrative privileges in accordance with the principle of least privilege.

Users were further advised to monitor account activity and authentication logs for suspicious login attempts or other unauthorised activity.

The agency also urged organisations to educate employees on how to identify and report suspicious account activity as part of broader efforts to reduce the risk of account compromise.

The post NITDA Warns Zoom Users Of Critical Vulnerability That Could Expose Accounts appeared first on Tech Digest News.

TECHDIGEST – Video conferencing service company, Zoom, has announced plans to lay off about 1,300 employees as it reacts to the global market contraction.

Zoom’s CEO, Eric Yuan, made the announcement in a memo to employees, noting that the layoff would impact every part of the organization.

The affected workforce makes up 15% of Zoom’s net staff strength.

READ ALSO: Microsoft Unveils ChatGPT AI in Binge, Edge browser to challenge Google

The layoff is the latest significant job cut in the tech industry following the pandemic-fueled surge where demand for digital services wanes.

According to Yuan, he and other executives would take a significant pay cut, adding that he had made “mistakes” in how quickly the company grew during the pandemic.

“As the CEO and founder of Zoom, I am accountable for these mistakes and the actions we take today– and I want to show accountability not just in words but in my own actions.

“To that end, I am reducing my salary for the coming fiscal year by 98% and foregoing my FY23 corporate bonus.”

In addition, however, Yuan said members of the executive leadership team will reduce their base salaries by 20% for the coming fiscal year and forfeit their fiscal year 2023 bonuses.

Recall that other top tech companies globally, including Microsoft, Twitter, Google, have had to layoff a percentage of their workforce to gain stability in recent times.

The post Zoom to lay off 1,300 employees appeared first on Tech Digest News.

TECHDIGEST – The Computer Security Incident Response Team (CSIRT), established by the Nigerian Communications Commission (NCC) has advised users of the Zoom platform to install the latest update of the software.

This advice comes following the discovery of vulnerabilities that allow a remote attacker to exploit the app.

The NCC-CSIRT reported that the Indian Computer Emergency Response Team (CERT-In) found several flaws in the Zoom product. The video telephony platform became popular for virtual meetings in the wake of the COVID-19 Pandemic with more than 300 million daily users.

READ ALSO: Postmaster-General of NIPOST Replaced – FG

According to the NCC-CSIRT advisory, “A remote attacker could exploit the vulnerabilities to circumvent implemented security measures and cause a denial of service on the targeted machine.”

It noted, “These vulnerabilities exist owing to incorrect access control implementation in Zoom On-Premises Meeting Connector MMR prior to version 4.8.20220815.130. A remote attacker could exploit these flaws to join a meeting they were not permitted to attend without being seen by the other attendees. They can also access audio and video feeds from meetings they were not permitted to attend and interrupt other sessions.”

A successful exploit of these vulnerabilities could allow an unauthorized remote authenticated user to bypass implemented security limitations on the targeted system.

The Computer Security Incident Response Team (CSIRT) is the telecom sector’s cyber security incidence centre set up by the NCC to focus on incidents in the telecom sector and as they may affect telecom consumers and citizens at large. The CSIRT also works collaboratively with the Nigeria Computer Emergency Response Team (ngCERT), established by the Federal Government to reduce the volume of future computer risks incidents by preparing, protecting, and securing Nigerian cyberspace to forestall attacks, and problems or related events.

The post NCC-CSIRT urges Zoom users to install update due to vulnerabilities appeared first on Tech Digest News.

TECH DIGEST – ‌Facebook-owned messaging platform, WhatsApp, on Thursday, introduced voice and video calling features to its app’s desktop.

WhatsApp, in a statement, said, “We’re excited to announce that private and secure one-to-one voice and video calls are now available on WhatsApp’s desktop app.

“Throughout the last year we’ve seen significant increases in people calling one another on WhatsApp, often for long conversations.

“Last New Year’s Eve, we broke the record for the most calls ever made in a single day with 1.4 billion voice and video calls.

“With so many people still apart from their loved ones, and adjusting to new ways of working, we want conversations on WhatsApp to feel as close to in-person as possible, regardless of where you are in the world or the tech you’re using.

“Answering on a bigger screen makes it easier to work with colleagues, see your family more clearly on a bigger canvas, or free up your hands to move around a room while talking.

“To make desktop calling more useful, we made sure it works seamlessly for both portrait and landscape orientation, appears in a resizable standalone window on your computer screen, and is set to be always on top so you never lose your video chats in a browser tab or stack of open windows.”

The move to facilitate calls over large screens put WhatsApp on par with video-conferencing bigwigs Zoom and Google Meet, but it is unclear if it has ambitions to compete with the two in the enterprise space.

The post WhatsApp Introduces Voice, Video Calls to Desktop App appeared first on Tech Digest News.

TECH DIGEST – Facebook Inc’s WhatsApp will introduce voice and video calling feature to the messaging app’s desktop version next year, Reuters quoted a company spokesperson as saying.

The move to facilitate calls over large screens would put WhatsApp on par with video-conferencing bigwigs Zoom and Google Meet, but it is unclear if it has ambitions to compete with the two in the enterprise space.

With over two billion users globally, WhatsApp is second only to its parent firm Facebook Inc’s namesake app, yet it is largely used for personal calls, unlike Zoom or Google Meet.

WhatsApp said it has already rolled out the feature to some desktop users on a trial basis in time for the holiday season, a move first reported by tech blog WABetaInfo.

A second wave of the coronavirus has forced many people around the world to stay home and plan gatherings with friends and family over the internet instead.

Zoom Video Communications Inc said on Friday it was removing the 40-minute time limit for its free accounts on all meetings globally for the holiday season.

In a similar move, Google Meet has said free users would not have to limit conversations to 60 minutes until March.

The post WhatsApp to bring voice, video calls to desktop next year appeared first on Tech Digest News.

TECH DIGEST – Zoom’s end-to-end encryption (E2EE) has arrived, letting both free and paid users secure their meetings so that only participants, not Zoom or anyone else, can access their content. Zoom says E2EE is supported across its Mac, PC, iOS, and Android apps, as well as Zoom Rooms, but not its web client or third-party clients that use the Zoom SDK.

E2EE has launched in technical preview, which means Zoom is asking for feedback on the feature for 30 days. However, the company says that E2EE will continue to be available after this period. Instructions on how to enable it can be found in Zoom’s help center.

Zoom has previously offered encryption for its calls, but the data was only encrypted between each meeting participant and Zoom’s servers, rather than being end-to-end encrypted between participants. Once E2EE is enabled, you can check Zoom is using the more secure kind of encryption using the green shield at the top left of a meeting window. The shield will show a padlock rather than a checkmark if the meeting is encrypted end-to-end.

Although E2EE meetings are more secure, they don’t work with a few of Zoom’s features. These include its cloud recording, live transcription, polling, meeting reactions, and join before host features. Participants also won’t be able to join using “telephone, SIP/H.323 devices, on-premise configurations, or Lync/Skype clients,” as Zoom says these can’t be end-to-end encrypted.

Zoom’s E2EE meetings support a maximum of 200 participants. That won’t affect users on Zoom’s Basic or Pro plans, which max out at 100 participants, but it could be a problem for Business or Enterprise subscribers which would otherwise allow for up to 300 or 500 participants.

End-to-end encryption is available for both free and paid users, but Zoom says free accounts will need to verify their phone number using SMS and also need a valid billing option associated with their account. Initially Zoom said end-to-end encryption wouldn’t be available for free users to prevent the service from being used for unlawful activity, but the company quickly backtracked and announced it would be available for everyone later that month.

This initial launch is just the first of four phases Zoom is planning for its end-to-end encryption offering. The next phase, which is scheduled to include better identity management and support for single sign-on, is currently planned to launch next year.

The post Zoom’s End-to-End Encryption Has Arrived appeared first on Tech Digest News.