18 December 2012—A vulnerability inside all current Cisco IP phones [PDF]—one of the top selling brands of voice over Internet Protocol telephones—allows hackers to take complete control of the devices, according to computer scientists at Columbia University.“Once in, the attacker can use the phone’s microphones to stealthily exfiltrate audio data at any time, regardless of whether a phone call is in progress,” says Ang Cui, one of the Columbia computer scientists who discovered the vulnerability. The hacked phone can then infect other phones on the same network and attack connected computers and devices such as printers, he adds. [Read More]