The article discusses a security vulnerability where corporate phone systems, specifically Avaya IP Office, are exposing detailed call logs through port 0. These systems stream SMDR (Station Message Detail Recording) data, which includes call start times, connected durations, caller and callee numbers, extension names, and internal addresses. The data is sent as comma-separated text without authentication, making it accessible to anyone who connects to port 0. The article notes that 21 hosts across various ISPs in the UK, US, and South Africa were found to be streaming this sensitive information. The vulnerability stems from systems being configured to send SMDR data to port 0, which is typically considered non-existent in network protocols. However, since port 0 is a valid socket number, attackers can connect to it and read the call logs. The article highlights that this is not a deliberate security measure but rather a misconfiguration, often resulting from port-forwarding rules with external ports left at 0. The author emphasizes that while many services on port 0 are accidental, the exposure of call logs is particularly concerning as it reveals sensitive business information. The article also notes that tools like netcat and telnet refuse to connect to port 0, but a simple SYN scan can discover these vulnerable systems. The author concludes that the worst vulnerability on port 0 is not a login page but the unsecured exposure of corporate call histories, which could be exploited for social engineering or other malicious purposes.

PHP 보안 취약점이 발견되면서 전 세계 많은 웹사이트가 예방 차원에서 일시 중단되거나 긴급 업데이트를 진행했습니다. BBC 보도에 따르면 아직 이 취약점을 이용한 성공적인 공격은 확인되지 않았지만, 위험 가능성이 커 웹사이트 운영자와 보안 담당자가 빠르게 움직인 상황입니다. 핵심은

Slovakia's national security service, the NBU, uncovered severe security vulnerabilities in traffic speed cameras purchased from a Russian firm. The cameras, rebranded as CORDON PRO.M models by Semicon of St. Petersburg, were acquired through a Cyprus shell company with fake certifications. Key issues include SMS-activated Russian backdoors allowing remote access, live camera feeds accessible via IP without passwords, and hardcoded Russian phone numbers for unauthorized entry. The SecureBoot feature is ineffective, and web management portals expose live streams to anyone with the camera's IP address. Over 185 cameras have been deactivated by the Slovak Ministry of the Interior following investigations prompted by opposition pressure. Concerns extend beyond Slovakia, as similar systems may exist in Croatia and other Eastern European nations. The incident highlights risks of adopting foreign surveillance technology without rigorous security audits.

무선 이어폰을 끼고 출퇴근길 대화를 나누거나 음악을 듣는 일은 이제 일상이 되었습니다. 하지만 내 이어폰이 누군가의 도구로 변해 내 목소리를 전송하고 있다면 어떨까요? 최근 비츠 버즈 사용자라면 반드시 짚고 넘어가야 할 보안 문제가 불거졌습니다. 블루투스 연결 과정의 인증 허점을

Exim is a message transfer agent (MTA) developed at the University of Cambridge for use on Unix systems connected to the Internet.

Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. To help increase online privacy, Unbound supports...

Free and open source webmail software for the masses, written in PHP

Free and open source webmail software for the masses, written in PHP

Read-only mirror of https://gitlab.gnome.org/GNOME/libxml2 - GNOME/libxml2

Expat XML parser

Free and open source webmail software for the masses, written in PHP