The Connection Between GoldenSpy and MEDoc: Reducing the Security Risk of Doing Business

The Connection Between GoldenSpy and MEDoc: Reducing the Security Risk of Doing Business

Employees are often required to use various desktop applications to do business. In the work-from-home era, it’s very common to find remote collaboration and video conferencing apps, such as Zoom, Teams, Webex, being used on corporate devices.


In today’s COVID-19 world, these applications are almost mandatory for efficient collaboration and productivity. But even before COVID-19, certain applications had to be installed due to various regulation demands. For example, a finance department may need to use various global tools to report financial transactions, handle taxes, etc.


IT and security administrators are often obligated to allow these applications to be installed on the corporate desktops, to allow employees to do their work. But can these applications be trusted or do security compromises have to be made?


The Security Risk of Being Popular


Almost everyone uses video conferencing applications today, with Zoom and Microsoft Teams being the most popular. Some assume that popular applications must be secure. They wouldn’t be so popular if their security couldn’t be trusted, right? Zoom, Microsoft, and others invest heavily in securing these applications. Sometimes they even buy an entire company to help to secure their own product. But is it always enough?


Only recently, a researcher named Oskars Vegeris found a vulnerability in Microsoft Teams. This vulnerability allowed attackers to execute code remotely on victim devices, simply by sending them a specially crafted message.


It took Microsoft some time to acknowledge and fix this vulnerability, with a fix being available only a few months after the discovery.


Exploiting vulnerabilities by simply sending an innoc ..

Support the originator by clicking the read the rest link below.