An unpatched critical security vulnerability affects the Zoom app for Apple Mac computers. The vulnerability leverages the click-to-join feature of the popular conferencing software that has been designed to automatically activate Zoom app installed on the system. To exploit this vulnerability an attacker needs to create an invite link through his account on the Zoom website and embed it on a third-party website as an image tag or using an iFrame and just convenience the targets into visiting that website. The company has acknowledged the issue but also added that there is no indication it has been exploited to the privacy of any of its users.
Source: https://thehackernews.com/2019/07/webcam-hacking-video-conferencing.html