We thought that we had stumbled upon a serious security flaw. In some areas, a competitor could do seriously damage with how much information they are able to see. Had a cybercriminal participated in a conversation like this, they would have had a field day with the info obtained. Spreadsheets with sensitive financial data, inbox contents, private messages on Facebook, all of them will be seen by the other person.
If the person who had hosted the session does not notice the tiny warning at the top, they will continue sharing whatever they’re doing on the screen. The people at the other end of the line will still see what’s happening there. Once the person who started screen-sharing hangs up, the desktop-sharing function will continue. If you do a Skype for Business call with “screen-sharing” turned on, be prepared to share more than what you wanted. It was not related to hacking and other cyber-attacks but a pure “feature”, whose purpose and value we haven’t yet been able to decipher. This week, we discovered a serious security risk and privacy breach with the Skype for Business app. Sometimes, ubiquitous, extremely popular services release some features that truly boggle the mind. Sometimes, it becomes obvious that tools and education alone won’t keep users truly safe online, nor will they enforce their privacy. Here at Heimdal Security, we spread our time between providing security tools to prevent serious attacks like ransomware or next-gen malware and providing the education necessary to keep personal data safe across various platforms and devices.
0 kommentar(er)
