VoIP Security

SS7 Security On Techmeme? A Reminder About Interconnected Systems…
SS7 security issues reported on Techmeme? I did a double-take yesterday and, as Jay Cuthrell noted on Twitter, wondered if this was a “ThrowbackThursday” taken to the extreme. But no, there was ...

Verizon Launches Voice Cypher Secure VoIP Mobile App… With A Government Backdoor
Verizon Wireless this week did something that initially seemed quite impressive – they launched “Voice Cypher”, an app available for iOS, Android and Blackberry that promises secure end-to-end encryption. It uses VoIP ...

Two New Asterisk Security Vulnerabilities Related To SMS And AMI
The great folks at the Digium / Asterisk Security Team have issued two new security advisories that folks running Asterisk should pay attention to. They are: AST-2013-006: Buffer Overflow When Receiving Odd ...

Large-scale Attacks Against VoIP and Videoconferencing Happening Today?
Are there large-scale attacks happening against VoIP and videoconferencing systems today? Or is it limited to one particular system? In a posting this morning to the VoiceOps mailing list, J. Oquendo wrote: ...

Dan’s new book: Seven Deadliest Unified Communications Attacks
For those of you listening to Blue Box, you may be interested to know that I (Dan) recently wrote a book for Syngress called the "Seven Deadliest Unified Communications Attacks". In the ...
Blue Box #86: An Update on Blue Box, One Year Later
Synopsis: Blue Box #86: Dan and Jonathan provide an update on what's happened in the year since Blue Box #85 and talk a bit about what's next Welcome to Blue Box: The ...

VOIPPACK for April adds Asterisk scanning, leaking phones and Troopers09
Announcing the VOIPPACK April edition supporting IAX2 and can now scan Asterisk servers. Because the feedback for sipautohack was great, we included a similar tool for the Asterisk protocol called iax2autohack in ...
Blue Box #85: Internet phone calls and terrorism, Georgia Tech report on Emerging Cyber Security Threats, phone jamming, 802.1X-REV, 802.1AE, VoIP security news and more
Synopsis: Blue Box #85: Internet phone calls and terrorism, Georgia Tech report on Emerging Cyber Security Threats, phone jamming, 802.1X-REV, 802.1AE, VoIP security news and more Welcome to Blue Box: The VoIP ...
Blue Box’s 3-year anniversary coming up on Friday…
It was three years ago Friday, on October 24, 2005, that I uploaded Blue Box Podcast #1, an 11-minute show where I introduced the show, talked about VoIP security news (To no ...