Zoom’s video conferencing service has reached an agreement with the US Federal Trade Commission (FTC) regarding security concerns. This was reported by Ars Technica.
Zoom has neither acknowledged nor denied the allegations of inadequate user protection but has agreed to accept the regulator’s security requirements.
Zoom Reaches FTC Security Agreement
The main allegations against Zoom, according to the FTC:
- Misleading users about the security level;
- Unsecured storage of records in the cloud;
- Safari security bypass ;
- Increased risk of video surveillance ;
- Misleading software-related alerts;
- A false sense of security.
FTC Requirements :
- Annual safety assessment;
- Development of ways to protect against security risks;
- Launching a program to identify vulnerabilities;
- Creation of policies to protect against online attacks;
- Implementation of protection against unauthorized access to the network;
- External safety assessment every two years.
As part of the agreement, Zoom agreed to the requirements of the regulator and committed to implementing the necessary changes.
« Zoom agrees with the requirement to develop and implement a comprehensive security program, not to mislead concerning privacy and security, as well as introduce other detailed and specific measures to protect their user base, which has grown from 10 million in December 2019 to 300 million in April 2020 during the COVID -19 pandemic, ”the department said.
As a reminder, at the end of October, Zoom began launching end-to-end encryption for all users. Now video conferencing in the service will become more secure.