IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

Zoom 5.0 adds 256-bit encryption to address security concerns

Milestone update adds stronger host controls to prevent cyber incidents like Zoom-bombing

zoom

Zoom has rolled out a flagship update comprising data encryption and front-end security-centric functionality as part of the company’s 90-day plan to address privacy and security gaps. 

The company hopes the implementation of the 256-bit AES-GCM encryption standard in Zoom 5.0 will give users concerned over the security of meetings some reassurance that their data is protected from cyber criminals. 

With the added layer of encryption, Zoom Meeting, Zoom Video Webinar and Zoom Phone data will be protected against tampering, the company insists, with this latest update providing a level of confidentiality that wasn’t present in previous iterations.

The standard will take effect once all accounts are enabled with GCM, with system-wide account implementation set to take place on 30 May.

Zoom was previously criticised for not using end-to-end encryption to safeguard meetings despite claiming to on promotional materials.

The network improvement comes in addition to Control Data Routing, which allows account administrators to choose which data centre regions their account-hosted meetings and webinars use for real-time traffic. This measure was announced by the company earlier this month.

Meanwhile, the front-end user interface (UI) will be overhauled to include a host of additional functionality, from host controls to passwords for cloud recordings.

“We take a holistic view of our users’ privacy and our platform’s security,” said Zoom CPO Oded Gal. “From our network to our feature set to our user experience, everything is being put through rigorous scrutiny. On the back end, AES 256-bit GCM encryption will raise the bar for securing our users’ data in transit. 

“On the front end, I’m most excited about the Security icon in the meeting menu bar. This takes our security features, existing and new, and puts them front and centre for our meeting hosts. With millions of new users, this will make sure they have instant access to important security controls in their meetings.”

As part of the major update, users will be given a central security hub, which can be accessed through a security icon on the host’s interface. Hosts can, for the first time, report a user to Zoom, and disable the ability to participants to rename themselves, among other controls. The virtual waiting room, meanwhile, will be enabled by default so hosts can control who can enter meetings at all times.

Related Resource

Five essentials of a secure modern workplace

The CIO's guide to unleashing productivity whilst minimising risk

Download now

The latest version of Zoom will also support a new data structure for larger organisations, allowing them to link contacts across multiple accounts so people can seamlessly search and find meetings, phone contacts or chats.

Improvements to the dashboard will allow account administrators to view how their meetings are connected to Zoom data centres, which includes any data centres connected to HTTP Tunnel servers, as well as Conference Room Connectors and gateways.

The company has ploughed its resources into resolving a host of well-documented security issues which have arisen since the video conferencing platform was thrust into the spotlight following an explosion of user activity.

While many have opted to use the service in light of the coronavirus pandemic forcing employees to work from home, a string of organisations have instead banned the platform, including the Ministry of Defence (MoD) and Google.

Featured Resources

Four strategies for building a hybrid workplace that works

All indications are that the future of work is hybrid, if it's not here already

Free webinar

The digital marketer’s guide to contextual insights and trends

How to use contextual intelligence to uncover new insights and inform strategies

Free Download

Ransomware and Microsoft 365 for business

What you need to know about reducing ransomware risk

Free Download

Building a modern strategy for analytics and machine learning success

Turning into business value

Free Download

Recommended

Dell Technologies World 2022: Dell unveils fastest storage architecture in company history
Server & storage

Dell Technologies World 2022: Dell unveils fastest storage architecture in company history

4 May 2022
Dell Technologies World 2022: Dell unveils security offerings for major cloud providers
public cloud

Dell Technologies World 2022: Dell unveils security offerings for major cloud providers

3 May 2022
How do you become an ethical hacker?
ethical hacking

How do you become an ethical hacker?

29 Apr 2022
What is phishing?
phishing

What is phishing?

29 Apr 2022

Most Popular

Windows Server admins say latest Patch Tuesday broke authentication policies
Server & storage

Windows Server admins say latest Patch Tuesday broke authentication policies

12 May 2022
16 ways to speed up your laptop
Laptops

16 ways to speed up your laptop

13 May 2022
How full-stack observability can accelerate IT innovation
Sponsored

How full-stack observability can accelerate IT innovation

3 May 2022