Scribd Logo
Carica

Benvenuto in Scribd!

  • Infosec Review PDF

    Caricato da

    Fajar Kurniawan
    40 visualizzazioni7 pagine
    This document discusses security and privacy issues with the video conferencing platform Zoom. It notes that several organizations, including SpaceX and Taiwan's government, have banned the use of Zoom due to cybersecurity concerns. The document outlines vulnerabilities in Zoom, including how the app collects extensive personal data on users and may share it with third parties like Facebook. It warns that using Zoom poses risks like leaking confidential Pertamina information, exposing employee personal data, compromising end user devices, and harming Pertamina's IT infrastructure. The document recommends that Pertamina not use Zoom and instead use only approved internal collaboration tools like Microsoft Teams.

    Descrizione originale:

    Titolo originale

    Infosec Review.pdf

    Copyright

    © © All Rights Reserved

    Formati disponibili

    PDF, TXT o leggi online da Scribd

    Hai trovato utile questo documento?

    Questo contenuto è inappropriato?

    Segnala questo documento
    This document discusses security and privacy issues with the video conferencing platform Zoom. It notes that several organizations, including SpaceX and Taiwan's government, have banned the use of Zoom due to cybersecurity concerns. The document outlines vulnerabilities in Zoom, including how the app collects extensive personal data on users and may share it with third parties like Facebook. It warns that using Zoom poses risks like leaking confidential Pertamina information, exposing employee personal data, compromising end user devices, and harming Pertamina's IT infrastructure. The document recommends that Pertamina not use Zoom and instead use only approved internal collaboration tools like Microsoft Teams.

    Copyright:

    © All Rights Reserved
    Scarica in formato PDF, TXT o leggi online su Scribd
    Segnala contenuti inappropriati
    40 visualizzazioni7 pagine

    Infosec Review PDF

    Caricato da

    Fajar Kurniawan
    This document discusses security and privacy issues with the video conferencing platform Zoom. It notes that several organizations, including SpaceX and Taiwan's government, have banned the use of Zoom due to cybersecurity concerns. The document outlines vulnerabilities in Zoom, including how the app collects extensive personal data on users and may share it with third parties like Facebook. It warns that using Zoom poses risks like leaking confidential Pertamina information, exposing employee personal data, compromising end user devices, and harming Pertamina's IT infrastructure. The document recommends that Pertamina not use Zoom and instead use only approved internal collaboration tools like Microsoft Teams.

    Copyright:

    © All Rights Reserved
    Scarica in formato PDF, TXT o leggi online su Scribd
    Segnala contenuti inappropriati
    di 7

    Corporate ICT – PT Pertamina (Persero)

    Pertamina Internal Use Only!


    Zoom Flaws

    Ref: Infosec Web Publisher


    Pertamina Internal Use Only!
    Zoom’s banned by organization

    Ref:
    ➢ https://www.forbes.com/sites/kateoflahertyu
    k/2020/04/02/elon-musks-spacex-bans-zoom-
    after---security-and-privacy-
    warnings/#905869c775a7
    ➢ https://www.fbi.gov/contact-us/field-
    offices/boston/news/press-releases/fbi-warns-
    of-teleconferencing-and-online-classroom-
    hijacking-during-covid-19-pandemic
    ➢ https://www.bloomberg.com/news/articles/2
    020-04-07/taiwan-bans-government-use-of-
    zoom-over-cybersecurity-concerns

    Pertamina Internal Use Only!


    Zoom’s data collection and data sharing
    Zoom Privacy Policy:
    Besides, Zoom may also collects:
    • MAC Address, Device ID, OS Version, Camera
    Type, Microphone and Speaker, Connection
    type, etc
    • Approximate Location
    • Employer Detail (Company, title, department)
    • Customer content (Cloud recordings, chat /
    instant messages, files, whiteboards, and other
    information shared while using the service,
    voice mails)
    • Other account data (Your phone number,
    language preference, password)

    Ref:
    ➢ https://securityboulevard.com/2020/03/us
    ing-zoom-here-are-the-privacy-issues-you-
    need-to-be-aware-of/
    ➢ https://zoom.us/privacy
    ➢ Forum Keamaan Siber (FORMASI) by
    Gildas Deograt, Cyber Sec Specialist

    Pertamina Internal Use Only!


    Other Zoom’s Vulnerability

    • Zoom knows if you are paying


    attention to the call
    • Zoom’s installer allows
    unprivileged attackers to gain
    root privileges on macOS client
    • The flaw gives attackers Zoom’s
    mic and camera access,
    allowing for a way to record
    Zoom meetings, or snoop in on
    victims’ personal lives
    • Zoom could share your
    personal data to facebook even
    you don’t have facebook
    account
    Ref:
    ➢ https://threatpost.com/two-zoom-zero-day-
    flaws-uncovered/154337/
    ➢ https://securityboulevard.com/2020/03/usin
    g-zoom-here-are-the-privacy-issues-you-
    need-to-be-aware-of/
    ➢ https://techcrunch.com/2020/03/31/zoom-
    at-your-own-risk/ Pertamina Internal Use Only!
    Risk
    1. Pertamina confidential information could be leaked
    2. Employee personal data could be exposed
    3. End user device could be compromised
    4. Pertamina network/ IT infrastructure could be harmed

    Recommendation
    1. Do not use Zoom for Pertamina business-related
    activities
    2. Use Only Pertamina standard application for
    online meeting (Microsoft Teams / m-Teams)

    Pertamina Internal Use Only!

    Potrebbero piacerti anche