With users relying more than ever on video collaboration, threats to its security are proliferating. While users and enterprises are familiar with headline-grabbing incidents such as Zoom bombing and malicious activities of malware creators and bad actors, the threat surface is far wider. Seemingly innocuous activities can pose significant threats. The introduction of AI and meeting assistants, usage of public Wi-Fi or insecure home networks, potentially compromised devices, access via mobile devices, lack of meeting passcodes, and failure to follow sign-on policies have all posed new threats to secure video collaboration.
Additionally, unauthorized access through weak passwords, data breaches from shared sensitive information, AI-powered impersonation attempts, and insecure storage of meeting recordings further complicate the security landscape. Even subtle actions like using unapproved video backgrounds or failing to blur personal spaces can inadvertently expose confidential information, underscoring the complex nature of safeguarding modern video collaboration platforms.
Subtle security risks
"It can be so subtle," confirms Eric Peterson, the Principal Security Consultant at New Era Technology.
"In video conferencing, minor security lapses can occur when individuals choose to use unvetted AI assistants or recorders, unapproved video backgrounds, or fail to use background blurring, potentially exposing their personal spaces and confidential information to other participants."
Peterson highlights that seemingly innocuous details visible during video calls can pose security risks. Personal items such as medication bottles on a desk or leftover lunch items in view of the camera can inadvertently reveal sensitive information about the user. These visual cues could potentially be exploited by malicious actors, compromising individual privacy and potentially the organization's security.
Best Practices for Secure Video Collaboration
To enhance video conferencing security, Peterson recommends a multi-layered approach:
- Use unique meeting IDs for each session
- Implement password protection, especially for sensitive discussions
- Enable waiting rooms to vet participants before granting access
- Utilize robust participant management tools
"The best practice is to use a dedicated, secure network for video conferencing, so you segment and isolate video traffic," Peterson explains. This approach, combined with end-to-end encryption and limited data collection, significantly reduces the risk of unauthorized access or interception of video communications.
Organizational policies and user behavior
Organizations should reinforce policies and ensure that IT departments clearly communicate acceptable practices. Many weaknesses and threats are introduced by non-malicious activities or employees who believe they are helping to be more productive and efficient.
