Main menu (IT)

Zoom Security

With CSUN's transition to virtual instruction, it might be helpful to understand Zoom's privacy policy. Zoom keeps CSUN data safe and secure. According to their privacy policy,

Zoom:

  • Does not sell your personal data 

  • Do not monitor meetings unless asked otherwise 

  • Hosts have the option to save a recorded meeting. These meetings should be saved to myCSUNbox so they cannot be accessed by unauthorized individuals 

  • Zoom only collects data necessary to provide you with full access to Zoom services. An example of data used is your IP Address or OS device details 

  • Users have control over their cookie settings.

Security of User Personal Data 

Zoom is committed to keeping your personal data secure. Zoom uses “industry-standard security technologies, procedures, and organizational controls.” 

For more detailed information, visit their website, Zoom's Privacy Policy

How To Keep Your Zoom Sessions Secure

A new form of trolling is on the rise in which a participant uses Zoom’s screen-sharing feature to interrupt and disrupt meetings and classes. The disruptions are being termed Zoom-bombings and the perpetrators Zoom Trolls. With this new threat of Zoom-bombing users may feel uneasy about using Zoom; however, there are many actions the user can take to prevent these bombings. These incidents can create significant issues with the teaching and learning of materials and steps should be taken to prevent this. Please visit How to Keep your Zoom Sessions Secure for more information. 

Zoom Fixes UNC Vulnerability 

Zoom has discovered a vulnerability with their chat feature. In Zoom's chat feature, users can communicate through messages in a chat room. The vulnerability allowed users in meetings to send links that could possibly be malicious and/or lead to theft of passwords and in severe cases the theft of personal information. When links are sent thorough this chat they are converted to URLs. Users in these meetings can click on these URLs. This poses a threat when a malicious link is sent and users proceed to click on it. Due to the act of this conversion Zoom converted every URL and UNC to a clickable link, the problem with this is that Windows will share the users' username and password, which could then be easily intercepted. 

This system can also be used to launch other applications. Usually, when your Windows computer launches a new application it will ask the user for permission; however, in this instance, it does not and opens the application immediately. 

Zoom recently released an update that fixed this issue. Once this update is complete the links will not be clickable. 

For more tips on making your devices secure visit, Information Security Guidelines - Working from Home.

A Message from Zoom

Zoom has seen a rise in users in the past few months that it did not anticipate. With this increase, they have also seen an increase in the number of challenges they have in front of them. They are working to solve all these issues and take all issues seriously. For more information on their story and how they are taking action, please visit A message to our users-Zoom.

Telehealth for Students - HIPAA Zoom

The HIPAA (Health Insurance Portability and Accountability Act) lays out privacy and security standards that protect the confidentiality of patient health information.  

When video conferencing, the security architecture must provide end-to-end encryption so that transmitted data cannot be intercepted.  

Zoom enables HIPAA Compliance, meaning the company is responsible for keeping patient information secure. Zoom does not have access to identifiable health information and protects and encrypts all audio, video, and screen sharing data. Zoom has signed a Business Associates Agreement with CSUN that certifies that they are HIPAA compliant. For more information on this please visit the Telehealth for Students - HIPAA Zoom website.