PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Một số tấn công mạng di động 4G/LTE và giải pháp phòng ngừa

blog.viettelcybersecurity.com | blog | #mobile-security | #telecom | #lte | #4g | #imsi | #countermeasures
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

An overview of attacks against 4G/LTE networks, including IMSI disclosure via fake base stations and Diameter signaling abuse, with recommended countermeasures for operators.
Published
Collected

Related coverage

blog · blog.viettelcybersecurity.com
Lỗ hổng mạng LTE mới cho phép kẻ tấn công mạo danh người dùng
Researchers unveiled IMP4GT attacks against 4G LTE and 5G networks, exploiting missing integrity protection to impersonate users or the network within about 2 km using software-defined radio.
blog · bishopfox.com
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.
blog · yeswehack.com
‘A fraction of the pentest cost’: Lessons from an Asian telco’s Bug Bounty success
An Asian telco's Bug Bounty lessons: crowdsourced testing at 'a fraction of pentest cost' yet finding bugs pentests missed, scaling hunters from 100 to 900, and six best practices.
blog · yeswehack.com
‘Continuous testing and a real-time understanding of my threat exposure’ – Ooredoo exec on the benefits of Bug Bounty
Ooredoo Qatar's security exec on adopting Bug Bounty and a VDP: continuous scalable testing, leaner vulnerability management and fast results across web, mobile and API assets.
blog · bugcrowd.com
Security flash: Salt Typhoon
Casey Ellis and Trey Ford break down Salt Typhoon's intrusions into nine US telecom firms, how edge attack surface expansion enabled access, and why ejecting attackers from telco stacks is so hard.
blog · bugcrowd.com
How T-Mobile Is Using a New Bug Bounty Program to Keep Customers Safe from Harm
A Q&A with T-Mobile SVP of cybersecurity Mark Clancy and Bugcrowd CTO Casey Ellis on how the company's new bug bounty program helps find and fix unknown vulnerabilities to protect customers.
Back