threat-intel
AI Notetaker Lets Hackers Spy on Government, Corporate Video Calls
High
Summary
An AI meeting assistant, tl;dv, is vulnerable due to a misconfiguration in its Firebase environment, allowing unauthorized access to users' video calls and meeting data. A security researcher discovered that users could query any other user's meetings and join calls, exposing sensitive information from government agencies, corporations, and universities worldwide. The vulnerability also reveals internal employee data through a publicly accessible internal game. The issue remains unaddressed as of publication.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data