Detecting a Skype security vulnerability that can leak user IP addresses
Before the COVID-19 pandemic appeared and somewhat disturbed the market of interactive online services, Microsoft's Skype was one of the dominant solutions in the field of video applications in particular and VoIP calls in general. all around the world. The pandemic appeared and the demand for online interaction exploded, leading to the introduction of a series of new services that made Microsoft's platform gradually lose its position. Of course, Skype still has a significant number of users, with millions of online accounts every day. But a recently discovered security incident could frustrate loyal fans of the service.
Accordingly, a serious vulnerability was recently discovered in Skype that is capable of exposing users' IPs. Successful exploitation of the vulnerability allowed the hacker to obtain the IP address as well as the approximate geographical location of the target. The alarming aspect is that this breach can be accomplished with a simple link sent via the Skype mobile app. Notably, the recipient doesn't even need to interact with the link - just opening the message is enough for an attacker to obtain an IP address. The only 'good news' is that this issue only occurs with the mobile app, not affecting the desktop Skype app at all.
An independent security researcher named Yossi was the first to bring this vulnerability to light and report it to Microsoft. And to our surprise, Microsoft initially downplayed the issue when it received the report, arguing that the IP address disclosure was not fundamentally a critical security hole that needed to be fixed. right away.
After many protests from the user community, as well as security experts and the media, Microsoft seems to have emphasized that exposing IP addresses can lead to privacy violations, potential abuse in personal relationships and even more invasive types of cyberattacks - something the company has always tried to avoid. Microsoft has finally acknowledged the seriousness of the situation and committed to addressing the vulnerability in an upcoming patch.
As of now, the problem has not been resolved. It's only a matter of time before Microsoft releases a fix. However, based on the company's initial response, experts say that this vulnerability is unlikely to have really received a high priority. So for now, if you're using Skype from your smartphone, consider adding a VPN to protect yourself while you wait for an official solution from Microsoft.
You should read it
- How to hide IP address on Skype
- How does IP address and MAC address work in parallel?
- Instructions for using IP address 192.168.2.2
- Link this website to friends, you will know their address via the computer's IP
- What is a static IP address?
- Understanding IP address 192.168.1.4
- Increase computer security through DNS server
- How to fix IP 169 address error
- Understanding IP address 192.168.1.3
- What is the IP address 192.168.1.5 used for?
- What is an IP address?
- Instructions for changing personal information on Skype
Maybe you are interested
Here's everything Microsoft knows about your PC!
How to enable Extension Performance Detector in Microsoft Edge
Microsoft: TPM 2.0 in Windows 11 is mandatory and 'non-negotiable'
New Microsoft 365 Attack Can Break 2FA
Microsoft still recommends 15-year-old backup solution for Windows 11 and 10 users
How to disable custom scroll bars on Microsoft Edge