'Zoomsday' Zoom Vulnerability Discovered Using Fewer Than 20 AI Prompts

Security researchers uncovered a significant Zoom vulnerability — dubbed 'Zoomsday' — by using fewer than 20 AI-generated prompts to guide the attack discovery process, highlighting how accessible AI tools have become for offensive security research. The finding demonstrates that AI dramatically compresses the time and expertise required to identify exploitable vulnerabilities in widely-used enterprise software. For developers and security engineers, this raises the baseline threat model: attackers no longer need deep domain expertise to probe software for weaknesses when AI can scaffold the discovery process. The incident adds urgency to calls for AI-assisted defensive tooling to keep pace with AI-accelerated offensive capabilities. Development teams should treat AI-assisted vulnerability discovery as a standard adversarial assumption when assessing their own systems' attack surface.