Today's Edition
By Dr. Mohamed Hamad Al Kuwaiti*
Cybersecurity threats arising from neglecting the protection of virtual meetings and the collaborative applications used in them are becoming an increasingly serious threat in today’s digital age, especially with the widespread, daily reliance on modern applications and technologies.
Virtual meetings — which includes government or private meetings, educational lessons, or even electronic games, and covers all levels of data classification from highly confidential data to open and public data — have become an effective means of communication between individuals and organisations, particularly as the pace of business accelerates away from traditional in-person meetings.
This reliance on digital communication tools has led to the rapid growth and widespread use of virtual meeting environments, both on personal and professional levels.
However, the failure to implement adequate security measures to protect these meetings puts sensitive data and strategic plans at risk, giving attackers the opportunity to infiltrate systems and steal information.
Recent reports have revealed the existence of security vulnerabilities in many virtual meeting applications. Some voice calls and video sessions lack end-to-end encryption, and incidents have been recorded involving the leakage of users’ e-mail addresses and private photos due to application flaws. Moreover, there has been a rise in malicious intrusions into virtual meetings, commonly referred to as "meeting bombing”.
As a result, several countries have taken action against virtual meeting applications, with some banning their use for security reasons, primarily due to weak encryption and the potential for hackers to access sensitive information. Some governmental bodies have advised their representatives to refrain from using such platforms for official matters, emphasising the need for caution and the adoption of security precautions when using these tools.
In the United States, legal action has been taken against one of the developers of these applications for failing to provide full encryption during virtual meetings.
Additionally, researchers have raised concerns about calls being routed through servers located in foreign countries — a practice that some companies have admitted was due to technical errors that have since been resolved, though the incidents led to significant losses in market value.
Another major concern associated with these applications is the increased risk of camera hacking, especially when security settings are not enabled. In such cases, hackers can take control of users’ cameras, allowing them to view everything happening during meetings. This severely threatens privacy and may result in serious consequences, such as the leakage of confidential information, escalation of disputes or security threats, reputational damage to individuals or organisations, and even psychological harm to affected users, especially when their privacy is blatantly violated.
In addition, security flaws such as weak passwords, outdated systems, or the lack of encryption tools can be exploited by cybercriminals to damage a company’s financial position, manipulate disclosures, or engage in fraud or extortion by demanding ransom payments to protect critical data.
The lack of sufficient awareness among users about potential risks and how to respond appropriately during meetings further increases the likelihood of making mistakes that allow attackers to gain access to devices.
However, many preventive measures can be taken to mitigate these risks, starting with the use of strong, unique passwords; enabling two-factor authentication; and regularly updating software to patch security vulnerabilities. It is also crucial to use Virtual Private Networks (VPNs) to secure communications and rely on antivirus software and firewalls.
Encrypting data, whether in transit or at rest, is equally important to ensure that attackers cannot access content even in the event of a breach. Users should also be educated on the importance of caution when sharing links or interacting with messages that appear to come from trusted sources. Furthermore, access settings should be configured to prevent unauthorised control of cameras and microphones during meetings, and users should be advised to turn off devices or disable cameras when they are not in use.
Ultimately, securing virtual meetings is not solely an individual responsibility; it is a shared duty that requires commitment from both institutions and individuals. Awareness and preventive measures remain the most effective tools for combatting cyber risks and limiting the potential for breaches and their consequences. In today’s digital world, protecting privacy and cybersecurity in all its dimensions has become an essential necessity, especially with the growing dependence on technology in both our professional and personal lives.
Therefore, security strategies must continue to evolve and adapt to keep pace with emerging and ever-changing threats, ensuring a safer and more private digital work environment.
*The writer is the head of the UAE's Cybersecurity Council
