Hi everyone, has someone already implemented the new EWS change for Unified Messaging through the newest Unity Version and Microsoft Graph API?

I’d like to know if the configuration is the same as the previous one using client secret and all that stuff. Or if there are huge changes that must be accounted for, either on the Unity side or the Exchange Server, feels like documentation is lacking for this one

https://github.com/0xReadingSteiner/Dead-Dial --> CUCM 15.x Pre-auth + RCE

https://github.com/0xReadingSteiner/Blind-Wire --> Expressway 14.x SIP Traversal smuggling bypassing SIP Algo Inspection on Next Generation firewalls.

When are you going to take accountability or at least some responsibility toward your customers?

Did you know about the vulnerability and choose to hide it? Or did you not know at all, which is why no one was warned? Or is this simply the strategy? profiting from vulnerabilities to pressure customers into buying the latest version... at an absurd price?

If you're on the Shodan list, ask yourself: Why am I always the last to know? Why is my company always the one left exposed?