OpenSSL DoS and DTLS, SIMBoxes, SIP-TLS and lots of advisories | allinfosecnews.com

March 29, 2022, 8:13 a.m. |

Real-time communications security on Communication Breakdown - Real-Time Communications Security www.rtcsec.com

And a warm welcome to the March edition of RTCSec Newsletter! We have new content for this newsletter, in the form of a video demo of an OpenSSL DoS (CVE-2022-0778). We’ll publish more about this on our blog.
In this edition, we cover:
OpenSSL DoS (CVE-2022-0778) versus WebRTC infrastructure Usage of SIMBoxes to evade Ukrainian phone companies blocking external phone calls VoIP calls and TLS security instructions Vulnerability reports for PJSIP, Asterisk, Mitel, Pascom, VoIPmonitor, 3CX and Cisco equipment RTCSec …

dos dtls openssl sip tls

More from www.rtcsec.com / Real-time communications security on Communication Breakdown - Real-Time Communications Security

March 2024: Webex leak, WhatsApp and Apple WebRTC vulnerabilities 4 weeks ago | www.rtcsec.com

apple call end exploits +18

February 2024: manipulating audio using LLM, malware using CPaaS and WebRTC security 1 month, 3 weeks ago | www.rtcsec.com

audio community conversations cpaas +20

January 2024: Critical WebRTC, CUCM and SIP ALG security fixes - fuzz it all and … 2 months, 3 weeks ago | www.rtcsec.com

alg back chromium critical +20

December 2023: Round-up of this year's VoIP and WebRTC security news, and DTLS hello race … 4 months ago | www.rtcsec.com

community december dtls emails +10

November 2023: Advisories for VoIP systems and devices, WebRTC privacy and spying on your calls 4 months, 3 weeks ago | www.rtcsec.com

arm asterisk caught communications +21

October 2023: security theatre and PBX hacking, plus last month's advisories 5 months, 4 weeks ago | www.rtcsec.com

con def def con end +11

September 2023: Security advisories, SIP & DTLS-SRTP interoperability and 5G infra attacks 6 months, 3 weeks ago | www.rtcsec.com

amp attack attacks delivery +20

August 2023: Join OpenSIPit, learn about Zoom, Skype vulnerabilities, and more 7 months, 3 weeks ago | www.rtcsec.com

august holidays hope latest +7

July 2023: VoIP and WebRTC attack surface, pentesting for 2023 and VoIP DDoS attacks 8 months, 4 weeks ago | www.rtcsec.com

attack attacks attack surface back +12

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

View on infosec-jobs.com

Cyber Security Cloud Solution Architect

@ Microsoft | London, London, United Kingdom

View on infosec-jobs.com

Compliance Program Analyst

@ SailPoint | United States

View on infosec-jobs.com

Software Engineer III, Infrastructure, Google Cloud Security and Privacy

@ Google | Sunnyvale, CA, USA

View on infosec-jobs.com

Cryptography Expert

@ Raiffeisen Bank Ukraine | Kyiv, Kyiv city, Ukraine

View on infosec-jobs.com

Senior Cyber Intelligence Planner (15.09)

@ OCT Consulting, LLC | Washington, District of Columbia, United States

View on infosec-jobs.com