Here's some timely advice from the Switchfin developers regarding security on your PBX;

"In case any of you were wondering why there has been a fairly notable upswing in the attacks happening on SIP endpoints, the answer is "script kiddies." In the last few months, a number of new tools have made it easy for knuckle-draggers to attack and defraud SIP endpoints including Asterisk-based systems as the one Switchvoice manufacture. There are easily-available tools that scan networks looking for SIP hosts, and then scan hosts looking for valid extensions, and then scan valid extensions looking for passwords."

Read the full post here.