PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Lỗ hổng mạng LTE mới cho phép kẻ tấn công mạo danh người dùng

blog.viettelcybersecurity.com | blog | #mobile-security | #research | #mitm | #5g | #lte | #imp4gt | #ndss
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Researchers unveiled IMP4GT attacks against 4G LTE and 5G networks, exploiting missing integrity protection to impersonate users or the network within about 2 km using software-defined radio.
Published
Collected

Related coverage

blog · blog.viettelcybersecurity.com
Một số tấn công mạng di động 4G/LTE và giải pháp phòng ngừa
An overview of attacks against 4G/LTE networks, including IMSI disclosure via fake base stations and Diameter signaling abuse, with recommended countermeasures for operators.
blog · bishopfox.com
Demystifying 5G Security: Understanding the Registration Protocol
A hands-on look at 5G registration security: how UE registration flows through the AMF, and how to test for SUPI disclosure, null/weak encryption (EEA0), and replay attacks, with tooling examples.
blog · bishopfox.com
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.
blog · bishopfox.com
Breaking HTTPS in the IoT: Practical Attacks For Reverse Engineers
Nathan Elendt shares three man-in-the-middle techniques for breaking HTTPS on production-grade IoT devices, starting with the default TLS hijacking attack that usually just works.
blog · bishopfox.com
LinkedIn 'Intro'duces Insecurity
Carl Livitt's critique of LinkedIn Intro: routing all email through LinkedIn's servers is a by-design man-in-the-middle; ten reasons follow, from privilege waiver to broken crypto signatures.
blog · hackerone.com
Certificate Pinning: Enhancing Client-Side Security
Explains certificate pinning in clients: basic public-key pinning versus more flexible certificate chain pinning, and how each defends against MITM attacks and compromised certificate authorities.
Back