ABU DHABI: xen1thLabs, a DarkMatter company that conducts vulnerability research, has discovered and disclosed a zero-day vulnerability in Cisco IP phones (7800 and 8800 series).

Hackers and malicious cyber actors could have exploited this vulnerability to compromise and infiltrate computer networks. A patch is now available thanks to the work of Cisco Product Security Incident Response Team (PSIRT) and xen1thLabs.

Rocco Calvi, Director Software Labs, xen1thLabs, said: "Through these security flaws, hackers could have gained control of device functionality such as microphone, web camera and voice mail. They could also have propagated malware on the network."

"We are constantly working to identify similar vulnerabilities across digital systems that are currently in operation. We have a vital role to play here in the Middle East where we provide state-of-the-art testing to identify security flaws to help safeguard systems from threats."

xen1thLabs has also previously seen evidence of hackers leveraging software vulnerabilities to perform mining of Bitcoins or using cloud computing to support their illegal actions. Threat actors, including those from nation states, have the ability to perform large-scale Distributed Denial of Service (DDoS) against their chosen target, such as government agencies or vital infrastructure services.

In this particular incident, xen1thLabs found that vulnerable IP phones were being used in the majority of enterprises across the business community around the world, potentially affecting millions of these popular devices.

The work of this UAE-based, dedicated test and validation Lab, identifies and reports zero-days to protect users. Our world-class researchers have unique expertise that specialises in vulnerability discovery and they work with vendors to find solutions that safeguard everyday users from new and emerging cyber threats.

About xen1thLabs
xen1thLabs conducts vulnerability research, which feeds in the testing and validation activities it conducts across software, hardware and telecommunication. xen1thLabs houses a team of world-class experts dedicated to providing high impact capabilities in cyber security. At xen1thLabs we are committed to uncovering new vulnerabilities that combat tomorrow's threats today.

https://www.darkmatter.ae/xen1thlabs/ 

© Press Release 2019

Disclaimer: The contents of this press release was provided from an external third party provider. This website is not responsible for, and does not control, such external content. This content is provided on an “as is” and “as available” basis and has not been edited in any way. Neither this website nor our affiliates guarantee the accuracy of or endorse the views or opinions expressed in this press release.

The press release is provided for informational purposes only. The content does not provide tax, legal or investment advice or opinion regarding the suitability, value or profitability of any particular security, portfolio or investment strategy. Neither this website nor our affiliates shall be liable for any errors or inaccuracies in the content, or for any actions taken by you in reliance thereon. You expressly agree that your use of the information within this article is at your sole risk.

To the fullest extent permitted by applicable law, this website, its parent company, its subsidiaries, its affiliates and the respective shareholders, directors, officers, employees, agents, advertisers, content providers and licensors will not be liable (jointly or severally) to you for any direct, indirect, consequential, special, incidental, punitive or exemplary damages, including without limitation, lost profits, lost savings and lost revenues, whether in negligence, tort, contract or any other theory of liability, even if the parties have been advised of the possibility or could have foreseen any such damages.