APIBAN

February 2026: TURN security series, libvpx VP9 overflow, Grandstream RCE, coturn fixes RTCSec newsletter for February 2026 covering Enable Security's TURN server security blog series, libvpx VP9 encoder heap overflow in Chrome and Firefox, Grandstream GXP1600 unauthenticated RCE with ca...

Time for me to say... "There are those who read what @sandrogauci.bsky.social and @enablesecurity.bsky.social write and those who wish they had."

Also, very honored to have @apiban.org make the newsletter -- in a good way. ;)

#security #rtc #sip

www.enablesecurity.com/newsletter/2...

#Kamailio v6.1.0 released!!

Thank you to @miconda.bsky.social and all the Kamailio developers.

Read more: www.kamailio.org/w/kamailio-v...

TURN Security Threats: A Hacker's View TURN servers are powerful proxies abused for internal network access, C2 operations, and DDoS attacks. Threat analysis from years of research and pentesting.

TURN servers are meant to relay WebRTC media. To an attacker, they're just proxies.

We wrote up the threats we've been finding since 2017: relay abuse, DoS amplification, and software vulns.

www.enablesecurity.com/blog/turn-se...

Wrote up our RTCon 2025 talk on TURN security threats.

www.enablesecurity.com/blog/turn-se...

APIBAN - 2025 year in review Happy New Year! Lets start 2026 off by looking at tha last year from an APIBAN point of view. The 2025 year in review.

2025: The Year in Review (for unwanted SIP/HTTP traffic)

apiban.org/2025.html

January 2026: Cisco UCM zero-day, 39C3 telco talks, FreePBX exploitation January 2026 RTCSec newsletter: Cisco UCM zero-day, 39C3 telco talks, FreePBX web shell in the wild, Element Call, voice AI risks, Yealink RPS CVE, and more

There are those who read what @sandrogauci.bsky.social and @enablesecurity.bsky.social write... and those who wish they had.

www.enablesecurity.com/newsletter/2...

#voip #security #rtc #freepbx

ClueCon Weekly with Daniel-Constantin & Fred Posner [Sn. 15 Ep. 21]: Kamailio 6.1 YouTube video by FreeSWITCH

Was honored to chat with @miconda.bsky.social and Luca about #kamailio and #kamailioworld on ClueCon Weekly.

www.youtube.com/watch?v=czDp...

Upgrade Postgres 13 to 17 The upcoming version of Matrix Synapse drops support for PostgreSQL 13. This is how I upgraded our deployments.

The upcoming version of #Matrix Synapse drops support for PostgreSQL 13.

If you're like me, and rarely use PostgreSQL... upgrading can create a bit of anxiety.

www.fredposner.com/upgrade-post...

Amazon AWS is a single point of failure.

AWS is a single point of failure.

A view out of the window of an easyJet airplane. Rain on the window

A graphic showing the title of the talk Dan is giving

Off to Krakow for a few days to attend the RTC.ON conference hosted by @swmansion.com ! Looking forward to seeing friends and meeting new contacts.

I’ll be speaking tomorrow about running WebRTC on low powered devices.

Banner for Antonio Bevilacqua's presentation at RTC.ON, called "From RTP Streams to AI Insights: Building Real-Time AI Pipelines with Juturna and Janus"

If you're in Krakow for RTC.ON, don't miss the presentation my colleague Antonio will make there! He's been working on a new cool project called #Juturna for real-time AI pipelines, which we've been using with #Janus ourselves. The event is usually streamed, so I'll share a link when I have one 🙏

ClueCon 2025 | Fred Posner: Scaling & Moving User Registrations/Locations/Presence - FS to Kamailio YouTube video by FreeSWITCH

My presentation from #ClueCon was posted on YouTube =) www.youtube.com/watch?v=7omz...

Next up at ClueCon... @miconda.bsky.social talking about #Kamailio and Lua

David Duffett gives a presentation on presenting presentations for an inception inducing presentation at #ClueCon2025

GitHub - apiban/apiban-client-nftables: nftables go client nftables go client. Contribute to apiban/apiban-client-nftables development by creating an account on GitHub.

Did you know we have an open source integration with nftables? It allows you to control how long ips are blocked. Would love a star if you could.

github.com/apiban/apiba...

July 2025: Rtpengine fixes, RTC conferences and showers of vulnerabilities July 2025 RTCSec newsletter: Rtpengine fixes, RTC conferences and showers of vulnerabilities

I say it monthly... "There are those who read what @sandrogauci.bsky.social and @enablesecurity.bsky.social write... and those who wish they had."

Big items in this month's newsletter.

www.enablesecurity.com/newsletter/2...

#sip #voip #rtp

See you at ClueCon 2025 Cluecon, a conference centered around FreeSWITCH, VoIP, and WebRTC, will be held in Chicago from August 4-7th, 2025. This year, I will present regarding migrating users from FreeSWITCH to registering ...

See you at ClueCon2025! www.fredposner.com/going-to-clu...

CitrixBleed 2 exploitation started mid-June — how to spot it CitrixBleed 2 — CVE-2025–5777 — has been under active exploitation to hijack Netscaler sessions, bypassing MFA, globally for a month.

New by me - although Citrix say there is no evidence of exploitation of CitrixBleed 2 vulnerability, they are wrong - it has been under active exploitation since mid June by an IP associated to a ransomware group, with multiple IP addresses now involved.

doublepulsar.com/citrixbleed-...

Love the inclusion of APIBAN.... thanks @nerduno.bsky.social nerdvittles.com/a-new-advent...

A New Day for Serious VoIP Developers #FusionPBX #FreeSWITCH #VoIP #NerdVittles

nerdvittles.com/a-new-advent...

New feature for apiban-client-nftables: flushafter

You can now adjust how long to keep the apiban addresses blocked in nftables (default period is 1 week).

github.com/apiban/apiba...

Kamailio World 2025: Thoughts Kamailio World 2025 took place in Berlin, DE from May 12-13th, 20025. A great event with amazing presentations and community. Can't wait for Kamailio World 2026.

Blogged: Kamailio World 2025 Thoughts www.fredposner.com/kamailio-wor...

Nice comparison chart in the post.

RTCSec Newsletter - a monthly newsletter about VoIP and WebRTC security Curated VoIP and WebRTC security news, research and updates by Enable Security.

The latest newsletter from @enablesecurity.bsky.social is out and as I always say...

There are those who read what @sandrogauci.bsky.social writes, and those who wish they had.

www.enablesecurity.com/newsletter/

(subscribe link right at the top)

#voip #webrtc #sip #security #kamailio

Philips Hue attempts to contact IPs in China

My Philips Hue bridge really wants to know the time in China. Like really, really badly.

This is the day! #KamailioWorld Conferece 2025 starts at 9:00am, Berlin, Germany: www.kamailioworld.com/k2025/ It is going to be two intense days, packed with presentations, attended by a full house! You can watch the live stream at: www.youtube.com/@KamailioWorld #opensource #telephony #voip #vonr

Full house here at #kamailioworld. I love my row. @danjenkins.bsky.social @lminiero.it

Kamailio World 2025 - Day 1 YouTube video by Kamailio World

Kamailio World 2025 has started! I'll do my presentation on #RoQ (RTP over #QUIC) later today, at 4.50pm Germany time. You can watch the live stream here!

www.youtube.com/watch?v=p4Zr...

Next up is David Duffet presenting at #KamailioWorld on behalf of Simwood. Navigating the decline of minute revenue.