Is Zoom still a security risk?

[Mr Pointy]

There was a lot of kerfuffle not long ago about Zoom being a potential security risk but is this still the case or is it now relatively safe?

Given the current explosion of interest in remote working & the rise of Zoom in popularity it would be useful to know if it was regarded as secure & safe to install.

[Boylston]

I work for an IT company and a big user of zoom. We allowed meetings without password, unauthenticated people to join automatically, change the name displayed, and also staff to define static meeting ids (typically their name). Basically made it easy and painless as we could (doh!!).

We noticed last week a stranger joining one of our meetings. Seems that Meetings ID's are not unique. So these are my suggestions

o Do not allow custom/static meeting ID's to be used. Definitely not without a password
o Encourage users to use a meeting password
o Unauthenticated guests should stay in a waiting room and be allowed in by the meeting organizer

I'm sure there are others.

Simon