Skype security
RECON (Reverse Engineering Conference) was recently held from June 16-18 in Montreal. One of the presentations involved some in-depth Skype reverse engineering and analysis. The slides for the...
View ArticleCisco Unified CallManager Vulnerabilities
Cisco announced vulnerabilities today in Unified CallManager versions 5.x: Cisco Unified CallManager (CUCM) 5.0 has Command Line Interface (CLI) and Session Initiation Protocol (SIP) related...
View ArticleSkype Protocol Cracked?
Several news sources are reporting that an unnamed 10-person Chinese company has successfully reverse engineered the Skype protocol. This company is supposedly planning to release their own software in...
View ArticleNew VoIP Phishing Scheme
Brian Krebs from the Washington Post reports on a new VoIP Phishing (Vishing) scheme targeting Bank of America customers. The scam appears as an official looking Bank of America email and tries to...
View ArticlePhone “Phreakers” Steal Minutes
The March 19th edition of NewsWeek has an article about cyber thieves stealing VoIP minutes by hacking into VoIP providers’ gateways. It’s the first time I’ve actually seen real numbers applied...
View ArticleVOIPSA Releases its VoIP Security Tools List
I’m pleased to announce the public release of VOIPSA’s VoIP Security Tool List. The list was developed to address the current void of VoIP security testing resources and sites, for vendors and VoIP...
View ArticleVoIP makes the SANS Top 20 Internet Security Risks of 2007 (again)
The SANS Institute just released its Top 20 Internet Security Risks of 2007 Annual update. Yet again this year, VoIP made the list, with a collection of just some of the VoIP vulnerabilities that were...
View ArticleBack Online
As some of you may have noticed, our servers were offline for the past 24 hours due to unforeseen circumstances. It seems the recent global economic turmoil has not left VOIPSA unscathed. Turns out...
View ArticleShall We Play a Game?
HD Moore of Metasploit Project fame has just released a new set of free War Dialing tools called WarVOX. What makes these new tools so interesting is that they leverage VoIP service providers to scan...
View ArticleVOIPSA 2.0
It’s been over 5 years since the Voice over IP Security Alliance was born. A small group of us originally aimed to fill a very large gap in the voip security landscape. Namely that outside of IETF...
View Article
More Pages to Explore .....