Last seen August 26, 2025

AI Security Incident

The article details Zoom AI Companion's security and privacy posture, highlighting a federated AI approach that integrates Zoom's and third-party models (e.g., OpenAI, Anthropic). It emphasizes customer data encryption in transit and at rest, coupled with explicit commitments not to use customer communications content for AI model training, thereby outlining measures to mitigate potential data privacy risks.

Technical Severity
Low severity
Lifecycle Status

STABLE

What Happened

The article details Zoom AI Companion's security and privacy posture, highlighting a federated AI approach that integrates Zoom's and third-party models (e.g., OpenAI, Anthropic). It emphasizes customer data encryption in transit and at rest, coupled with explicit commitments not to use customer communications content for AI model training, thereby outlining measures to mitigate potential data privacy risks.

Why This Matters

Current evidence identifies a security issue involving the affected technology, but does not yet support a more specific impact claim.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Confirm whether the affected technology is present in your environment and review the affected configuration.

Exposure

My AI Stack Exposure

Exposure unknown

Recommended Response
Last Seen

Aug 26, 2025 05:30

Exposure reason: This incident does not currently match a technology in My AI Stack.

Exploitation status: UNKNOWN

Primary entities:

AnthropicOpenAIanthropics/anthropic-sdk-pythonopenai/openai-python

Timeline

  • Incident first seen
    Aug 26, 2025 05:30

    BugSkan first recorded this incident.

  • AI Companion Security and Privacy - Zoom
    Aug 26, 2025 05:30

    zoom.com · Research

Sources

AI Companion Security and Privacy - Zoom

zoom.com · Aug 26, 2025 05:30

The article details Zoom AI Companion's security and privacy posture, highlighting a federated AI approach that integrates Zoom's and third-party models (e.g., OpenAI, Anthropic). It emphasizes customer data encryption in transit and at rest, coupled with explicit commitments not to use customer communications content for AI model training, thereby outlining measures to mitigate potential data privacy risks.

Open publisher source

My AI Stack Match

Want personalized relevance?

Create an account to see which incidents overlap with your AI stack.

← Back to incident intelligence