This is a game-changer announcement by Apple around cryptography. It is the “HTTPS moment for AI” in some ways.. Here is what this means: your private confidential data can be pooled with other data sources and used to securely improve your UX and that of the wider community

It's possible to disable 2G on iPhones when you have Lockdown mode enabled. Apple has included this to mitigate against bidding-down / downgrade attacks to GSM from cell-site simulators (IMSI catchers / false base stations).

🎉 Some new Telco utils 📞📡 are now installed in our x86_64, arm64 and partially on RISCV64 images 📦 👉 rfswift.io #pentest #telco #security #ss7 #2g #3g #4g #5g #core #network #usim #isim #sim

If you've ever wondered why carriers can't get voice / VoLTE right, here's an explainer on how we got here: nickvsnetworking.com/background-to-…

The world-first direct 5G connection to low Earth orbit satellite opens new era for mobile coverage esa.int/Applications/C…

Together with the paper: enck.org/pubs/bennett-c…. Nice research and results

Testing again Galileo OSNMA on a small RISC-V microcontroller. Bob M wanted some help troubleshooting his system, so I built and tested a known-good firmware image for him. The Galmon data feed is down, so I'm using my own uBlox receiver.

CAMEL had always been one of those weird #3GPP protocols that was hard for me to find info on or play with, I had a chance to work with it last year and get familiar with CAMEL, so here's the basics of CAMEL charging flows: nickvsnetworking.com/basic-camel-ch…

😍 In my field of fun hacking reversing unknown protocols I always find some checksum or CRC or hash that needs to be identified. The CRC catalogue is priceless for those moments. reveng.sourceforge.io/crc-catalogue/…

🚀Introducing Landrun: a CLI command to sandbox any Linux process using Landlock, no root, no containers, no headaches. Huge thanks to Mickaël Salaün (Landlock) and Günther Noack (Go lib) for making this possible! github.com/zouuup/landrun #Landlock #Linux #Security #Sandbox #Kernel

github.com/erlang/otp/sec…: this hits hard!

SK Telecom hacked, exposing data of 23 million subscribers donga.com/en/article/all…

security.opensuse.org/2025/05/12/scr… having a terminal multiplexer program installed as setuid root proves to be a great decision once again

Pretty wild security fail in a big operator's IMS - @o2 and @mavenir allowing their debug SIP headers through the P-CSCF to the UE, exposing the cell ID, IMSI and IMEI of the B party...

The hidden JTAG in your Qualcomm/Snapdragon device’s USB port linaro.org/blog/hidden-jt…

We are hiring a tech investigations editor to join our team at Lighthouse Reports! Still 7 days to apply. Info: apply.workable.com/lighthouse-rep…

Last month with Ryan Gallagher we published an investigation into the shady SMS market and its implications for security. For those who want to go deeper Gabriel Geiger and I have written a more technical briefing medium.com/@lighthouserep…

People often ask what it's like behind the scenes at the world's top spy tech trade fair, ISS World. Turns out it's like this x.com/LHreports/stat…

An iPhone has so many privacy and security features that it’s very easy to miss them. Now’s a good time to dive in and get to know them all. ssd.eff.org/module/how-to-…

Today, Project Zero released a 0-click exploit chain for the Pixel 9. While it targets the Pixel, the 0-click bug and exploit techniques we used apply to most other Android devices. projectzero.google/2026/01/pixel-…