Recent changes to improve the security and privacy of Zoom include the following:
Security Toolbar Icon for Hosts
The meeting host will now have a Security option in their meeting controls, which places all Zoom’s existing in-meeting security controls in one place. This includes locking the meeting, enabling Waiting Room, and more. Users can also now enable the Waiting Room in a meeting, even if the feature was not turned on before the start of the meeting.
Invite Button on Meeting Client Toolbar
The button to invite others to join your Zoom meeting is now available at the bottom of the Participants panel.
Meeting ID No Longer Displayed
The meeting ID will no longer be displayed in the title bar of the Zoom meeting window. The meeting ID can be found by clicking on Participants, then Invite or by clicking on the info icon at the top left of the client window.
Remove Attendee Attention Tracking Feature
Zoom has removed the attendee attention tracker feature as part of our commitment to the security and privacy of our customers.
Removal of the Facebook SDK in our iOS client
We have reconfigured the feature so that users will still be able to log in with Facebook via their browser.
File Transfers
The option to do third-party file transfers in Meeting and Chat was temporarily disabled. Local file transfer is available with our latest release. Third-party file transfers and clickable URLs in meeting chat will be added back in an upcoming release.
New Join Flow for the Web client
By default, users will now need to sign in to their Zoom account or create a Zoom account when joining a meeting with the Web client. This can be disabled by the Admin or the User from their settings page.
Join Before Host Emails Disabled
Notifications sent to the host via email when participants are waiting for the host to join the meeting have been disabled.
Setting to Allow Participants to Rename Themselves
Account admins and hosts can now disable the ability for participants to rename themselves in any meeting. This setting is available at the account, group, and user level in the Web portal.
Language for Directory and Company Directory (please note, this does not impact your account)
The language in your Company directory and Directory has changed. ‘Directory’ is now referred to as ‘Contacts’, ‘My Groups’ has changed to ‘My Contacts’, and ‘Company Directory’ is now listed as ‘All Contacts’ in version 4.6.10.
Domain Contacts Visibility (please note, this does not impact your account)
For free Basic and single licensed Pro accounts with unmanaged domains, contacts in the same domain will no longer be visible. We’ve also removed the option to auto-populate your Contacts list with users from the same domain. If you would like to keep those contacts, you can follow these step-by-step instructions to add them as External Contacts.
The latest software release can be accessed here: zoom.us/download.
If you’d like to keep an eye on the latest Zoom CVEs, click here. UCSB Information Security will continue to notify end-users of issues concerning Zoom and monitor the Zoom blog for updates: blog.zoom.us/.
Contact security@ucsb.edu with questions or concerns.