App security
Category: Collaboration
Secure Zoom browsing
Secure Zoom browsing means reducing risk from meeting links, chat-shared URLs, and file transfers that send users into browser flows attackers love.
Quick answer
Legba can isolate browser sessions while your team uses Zoom.
These tools are full of shared links and external content. Isolation helps reduce exposure when users open unfamiliar destinations and downloads that start from Zoom.
This page does not imply an official integration with Zoom. It is a guide to securing browser workflows around the app.
Last updated
2026-01-29
Common browser risks
- Phishing via fake “meeting recording” or “missed message” links that lead to credential harvesters.
- Malicious links shared in meeting chat that redirect to scam pages or drive-by downloads.
- Impersonation of internal users or vendors to request urgent actions during meetings.
- Token theft and session hijacking when users authenticate then browse risky destinations in the same profile.
- Downloading shared files without scanning, especially from external participants.
Typical sensitive data in Zoom
- Meeting links and metadata (times, participants).
- Chat messages and shared links.
- Recordings and transcripts (potentially sensitive).
- Files shared during meetings.
- Account and admin settings for conferencing policies.
- Support tickets and incident details discussed live.
Recommended policies by role
Executives
- Treat unexpected recording links as suspicious; open external links in isolation by default.
- Avoid logging in via links received during meetings; use bookmarks for core apps.
- Use stronger re-auth for high-impact actions prompted during meetings (payments, security changes).
IT Admins
- Lock down meeting recording permissions and reduce external participant file sharing where possible.
- Isolate unknown links opened from chat and meeting invites.
- Restrict downloads from untrusted sources; require scanning and release workflows.
Security
- Monitor for impersonation attempts and suspicious meeting-invite patterns.
- Use isolation for investigating suspicious meeting links and landing pages.
- Apply browser policies that reduce risky permissions (notifications, clipboard) on unknown sites.
FAQs.
References
- 01
- 02Cloudflare: Browser IsolationCloudflare
- 03
