Attacker Takes Over Zoom AI

• The agent appears to have been given an environment with unrestricted HTTPS network access, with no user or admin-level configuration to lock it down.
• In this article, we explore how a malicious Skill (or a prompt injection) can manipulate Zoom’s agent into connecting to an attacker’s server, allowing the att