Looks legit and serious. Needing a meeting invite is a barrier to exploiting but not a huge one-- this is right to treat zero click RCE over Zoom as a big deal. Kudos to the write-up for being an effective explanation that's not obviously AI written, though it was probably adapted from an AI report.