Ah Med @A_Web_Plus

Sec|Telco|RF enthusiast Joined July 2016

Tweets

648
Followers

2K
Following

1K
Likes

2K

P1 Security @p1security

2 months ago

🚨 Many telco vulns never get CVEs. Vendors delay, ignore, or silently patch. Operators? Left in the dark. At @p1security, we follow a 180-day disclosure policy—document and publish in our private VKB when silence persists. 🔗 p1sec.com/blog/responsib… #CVE #TelecomSecurity #VKB

0 1 3 278 1

Crofton Black @cr0ft0n

2 months ago

Last month with @rj_gallagher we published an investigation into the shady SMS market and its implications for security. For those who want to go deeper @gabriels_geiger and I have written a more technical briefing medium.com/@lighthouserep…

1 5 10 758 1

mitsh @bmitsh

5 months ago

github.com/erlang/otp/sec…: this hits hard!

0 2 1 129 1

mitsh @bmitsh

7 months ago

Together with the paper: enck.org/pubs/bennett-c…. Nice research and results

Enno Rey @Enno_Insinuator

7 months ago

Together with the paper: enck.org/pubs/bennett-c…. Nice research and results

0 0 11 1K 5

0 3 6 558 2

NickvsNetworking @NickvNetworking

8 months ago

As someone learning Erlang / Elixir for telecom applications, this is an interesting read about Ericsson's use (or lack) of the language they created. iknek.github.io/blog/the-erlan…

3 2 9 819 3

HaxRob @haxrob

2 years ago

I recently found two very interesting Linux binaries uploaded to Virustotal. I call this malware 'GTPDOOR'. GTPDOOR is a 'magic/wakeup' packet backdoor that uses a novel C2 transport protocol: GTP (GPRS Tunnelling Protocol), silently listening on the GRX network (1/n) 🧵

15 284 1K 171K 590

Download Image

Cathal Mc Daid @mcdaidc

2 years ago

1/11 Today, we’re releasing details of a small but interesting mobile #vulnerability called MMS Fingerprint, reportedly used by #NSOGroup. How this might work, and how we found it, is a bit unusual. enea.com/insights/dusti… @EneaAB @josephfcox @rj_gallagher @campuscodi @lorenzofb

3 66 133 34K 73

mitsh @bmitsh

2 years ago

Excellent document detailing the many location possibilities targeting mobile phones and modems. While the focus here is how handsets are tracked on the battlefield, most of the techniques described are known to be used quite generally, outside of any war context too.

Cathal Mc Daid @mcdaidc

2 years ago

1 17 40 11K 18

Download Image

0 1 5 608 0

Lawfare @lawfare

2 years ago

“A fix is long overdue for … the technical vulnerabilities at the heart of the world’s mobile communications networks.” @RonDeibert and Gary Miller from @citizenlab on the security deficiencies associated with cell phone “roaming.” lawfaremedia.org/article/when-y…

0 24 28 11K 4

Ah Med @A_Web_Plus

2 years ago

Opening Critical Infrastructure: The Current State of Open RAN Security trendmicro.com/en_us/research… #InfoSec #CyberSecurity #OpenRAN #Security

0 0 2 757 0

mitsh @bmitsh

2 years ago

2 recent articles on mobile interconnect (citizenlab.ca/2023/10/findin…) and CDR (wired.com/story/hemisphe…), which show how much subscribers are exposed: good reads.

1 2 3 368 1

The Citizen Lab @citizenlab

2 years ago

NEW REPORT: Finding YouThe Network Effect of Telecommunications Vulnerabilities for Location Disclosure 👇 citizenlab.ca/2023/10/findin…

5 31 79 14K 24

Crofton Black @cr0ft0n

2 years ago

A year ago we revealed how Italian surveillance company Tykelab was using phone networks in the Pacific for global tracking operations. Our friends at @OCCRP have an update occrp.org/en/daily/17987…

1 8 12 1K 1

Mobile Security @mobilesecurity_

2 years ago

Android 14 introduces first-of-its-kind cellular connectivity security features #MobileSecurity #AndroidSecurity by ⁦@Google⁩ security.googleblog.com/2023/08/androi…

0 13 27 3K 4

mitsh @bmitsh

3 years ago

Serious findings ! The list of critical vulns in the Exynos baseband published in the last Android bulletin is quite long after all: source.android.com/docs/security/…. I guess the Internet-to-baseband vulns relate to IKEv2/IPsec.

Tim Willis @itswillis

3 years ago

18 99 243 122K 58

2 3 5 1K 1

mitsh @bmitsh

3 years ago

Some thoughts on telecom components security evaluation and GSMA NESAS certification: infosec.exchange/@bmitsh/109873…

2 1 5 592 0

P1 Security @p1security

3 years ago

P1 Security Lab is happy to release hermes-dec, an open-source disassembler and decompiler for the React Native Hermes bytecode: labs.p1sec.com/2023/01/09/rel…. We hope this will foster the security research around mobile apps based on this environment. #telecomsecurity #android #ios

0 16 36 6K 12

Kim Dotcom @KimDotcom

3 years ago

🧵Thread🧵 What’s the root cause of the US proxy war in Ukraine? Most people don’t have a clue. Let me explain. It all started after the 2007-2008 financial crisis that originated in the US. The reliability of the US Govt as a partner in global financial affairs was destroyed.

1K 9K 24K 0 5K

Signal @signalapp

3 years ago

Recently @twilio, which provides SMS verification services for Signal, suffered a phishing attack. Via Twilio, attackers may have accessed phone numbers & SMS registration codes for 1,900 Signal users. 1/

167 2K 5K 0 400

Domonkos Tomcsanyi @domi007

3 years ago

Hey telco security friends I found something that I haven't seen before so I thought I'd share: 3GPP has a GitLab now, and they publish the 5G API specs here as well as other stuff forge.3gpp.org/rep/explore They also use the great lib pycrate by @bmitsh (check commits in SA3 LI).