Responses

Responses

To avoid exposing our identities, here we selectively post some responses from the vendors. We are working aggressively with all the vendors involved in confirmed attacks, doing our best to help them fix their design flaws.

1. Slack

1. Invocation hijacking via slash command

2. URL spoofing inspection

2. Zoom

1. URL spoofing inspection

3. RocketChat

1. URL spoofing inspection

4. Webex Teams

1. URL spoofing inspection

5. Twist

1. URL spoofing inspection

6. Zoho Cliq

1. Access control violations