AI Notetaker Lets Hackers Spy on Government, Corporate Video Calls
A misconfiguration in Google Firebase exposed meeting data from the AI notetaker tl;dv, allowing hackers to access other users’ call information and potentially join government and corporate video calls.
A Google Firebase misconfiguration in tl;dv, an AI meeting notetaker, allows hackers to query any user’s meeting information and potentially join calls. The flaw exposes sensitive government and corporate video conferences to unauthorized access. The vulnerability stems from improperly secured database permissions, enabling attackers to extract call metadata and links. tl;dv has not yet commented on a fix.