Netcrook
#Asterisk
FreePBX Flaws Put the Voice Control Room in the Crosshairs
Two critical issues and one high-severity flaw in FreePBX modules sharpen a familiar warning: when the admin layer of a PBX stack breaks, the whole phone system can become the attack surface.
Critical FreePBX Flaw Could Open the Door to Admin Access
ACN CSIRT Italia has flagged a critical FreePBX vulnerability that could let an attacker bypass authentication on affected systems.
When a Phone System Becomes a Foothold: The FreePBX Fraud Playbook
A FreePBX-targeting campaign shows how a web-based PBX admin panel can shift from routine management to a long-lived platform for toll fraud and abuse.
Layered Persistence Puts FreePBX Under a Harder Kind of Siege
A reported campaign against FreePBX shows how a web admin panel, a shell dropper, and a PHP web shell can combine into a durable foothold on a telephony control plane.
FreePBX Backup Path Put Under Pressure as a High-Severity Flaw Lands in the Restore Workflow
A newly flagged vulnerability in FreePBX’s backup module shows how a routine recovery feature can become a high-risk trust boundary for administrators.