Abstract: One example method includes receiving, during a virtual conference hosted by a virtual conference provider, one or more audio or video streams from one or more client devices connected to the virtual conference, each client device associated with a participant attending the virtual conference; providing, to a trained machine learning (“ML”) model, the received one or more audio or video streams to determine a potential security intrusion; in response to receiving an indication of a potential security intrusion from the trained ML model: generating an indication of the potential security intrusion; and providing the indication to one or more client devices of the one or more client devices.