HP Poly VoIP vulnerability sets the stage for executive voice deepfakes (opens in new tab)

HP has released patches for a critical buffer overflow vulnerability in multiple IP-enabled conference phones from its Poly Voice line. The flaw allows unauthenticated attackers to obtain root privileges on the underlying operating system, potentially enabling them to execute other attacks such as eavesdropping on conversations and recording voice data for AI-enabled impersonation attacks. The vulnerability, , was discovered by researchers from security firm Rapid7 and resides in the code tha...