[CSS-research] Security Flaws Disclosed in LTE (4G) Mobile Telephony Standard

[Seamus Tuohy]

Hey all,

New 4G security vulnerability is out that they claim also impacts 5G.

https://www.bleepingcomputer.com/news/security/security-flaws-disclosed-in-lte-4g-mobile-telephony-standard/

"Two of the three attacks are passive, meaning an attacker can watch LTE
traffic and determine various details about the target, while the third is
an active attack that lets the attacker manipulate data sent to the user's
LTE device.

According to researchers, the passive attacks allow an attacker to collect
meta-information about the user's traffic (an identity mapping attack),
while the second allows the attacker to determine what websites a user
might be visiting through his LTE device (a website fingerprinting attack)."


Best,

s2e
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.eff.org/pipermail/css-research/attachments/20180701/1fe3c262/attachment.html>