Quarterly VoIP Vulnerabilities

Tuesday, April 15th, 2008

While most VoIP-related vulnerabilities are posted to the VOIPSA mailing list or blog, I thought it might be useful to have a informal quarterly summary of sorts among VoIP devices per searches from NIST.  I hope folks find it helpful, and of course post comments if I’ve overlooked anything from ...

BT Home Hub Wi-Fi Security Easy to Crack

Monday, April 14th, 2008

A security researcher claims to have found a significant weakness in the wireless encryption of a DSL home gateway made by Thomson and distributed to broadband subscribers in the U.K. by network operator BT. Exploiting the weakness could enable someone to connect to a victim's Wi-Fi router for malicious purposes such ...

Browser hack renders routers insecure

Tuesday, April 8th, 2008

Researcher Dan Kaminsky plans to show how a web-based attack could be used to seize control of certain routers. Kaminsky has spent the past year studying how design flaws in the way that browsers work with the Internet's Domain Name System (DNS) can be abused in order to get attackers behind ...

Drive-by Web Attack Could Hit Home Routers

Saturday, March 8th, 2008

If you haven't changed the default password on your home router, do so now. That's what researchers at Symantec and Indiana University are saying, after publishing the results of tests that show how attackers could take over your home router using malicious JavaScript code. For the attack to work, the bad guys ...

Detecting, Analyzing, and Exploiting Intranet Applications using JavaScript

Saturday, March 8th, 2008

Imagine visiting a blog on a social site or checking your email on a portal like Yahoo's Webmail. While you are reading the Web page, JavaScript code is downloaded and executed by your Web browser. It scans your entire home network, detects and determines your Linksys router model number, and ...