The Grumpy Geek

This article claims that at least one SIP-based VOIP solution is vulnerable to a pretty serious exploit.  Although they are withholding details while the vendor is releasing patches, researchers discovered that they could get a SIP phone to silently answer meaning one could listen in on the room.  They theorize that other vendors will be vulnerable as well.