Welcome to TCERT.

Washington Post: How the NSA infers relationships based on mobile location data from SS7 and GRX

May 4, 2014 | Posted in News | By

A new article shows preoccupying combination of SS7 and GRX interception, OTT app HTTP calls eavedropping and datawarehousing to extract subscriber privacy details from Telecom and Mobile operators. Washington Post: New documents show how the NSA infers relationships based on

Read More →

3GPP and GSMA to help vendors on improving equipment security

February 19, 2014 | Posted in News | By

As Network Element security is often a very vulnerable Achilles’ heel of the telecom operator, either from the OAM network or from the signaling network (have a look on P1 Security’s Vulnerability Knowledge Base for details), it is a very

Read More →

DoS auditing versus Fraudulent vendors of TDoS products/services with new multi-threaded SIP-based TDoS tool

November 15, 2013 | Posted in News | By

TDoS is a rising concern for operators of both traditional and VoIP networks: extortion, subscriber targeting denial of service attacks, … There are many reasons and unprotected infrastructures that combine to create downtime in telecom service. TDoS & DDoS testing

Read More →

Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability

November 6, 2013 | Posted in Advisories | By

Vulnerability in Cisco VoIP protocol SIP can cause temporary Denial of Service. Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability.  

Read More →

Belgacom hacks and spying show the needs to strongly improve telecom security

October 25, 2013 | Posted in News | By

“Several of us around the table had been subject to surveillance,” he told reporters.”The least we can expect is the countries and security services involve change their practices.” “According to De Standaard, […] the spying was carried out by the

Read More →

France in the NSA’s crosshair : phone networks under surveillance

October 21, 2013 | Posted in News | By

Le Monde article on NSA spying on France telecom networks based on Snowden leaks. “According to the documents retrieved from the NSA database […] telephone communications of French citizens are intercepted on a massive scale.” “The techniques used for these interceptions

Read More →

New report: Is Huawei in Ericsson’s shoes when Athens Affair hit?

October 18, 2013 | Posted in News | By

Huawei is trying to clear its name from the allegations of spying. But is Huawei really worse and compromised than Ericsson. Ericsson backdoored products were used by intelligence agencies to spy on Greek government officials and hundred of VIP mobile

Read More →

SIM Cards attacks using Over-the-Air Updates

July 22, 2013 | Posted in News | By

The attack is a combination of both insecure communication method of SIM cards update with OTA STK procedure; and vulnerability in Java version running on the SIM card. Industry reality is: Number of affected card is not very high, limited

Read More →

NSA eavesdropping of undersea telecom cables

July 10, 2013 | Posted in News | By

As many Snowden-revealed NSA document show, NSA is actively involved with breaking in and tapping undersea cables including high-speed telecom and internet optical fibers. These surveillance, tapping and sniffing may have been enabled both by hacking and by physical submarine operation

Read More →

Operation Tempora: GCHQ taps fibre-optic cables for secret access to world’s communications | UK news | The Guardian

June 21, 2013 | Posted in News | By

Operation Tempora: GCHQ taps fibre-optic cables for secret access to world’s communications. “Britain’s spy agency GCHQ has secretly gained access to the network of cables which carry the world’s phone calls and internet traffic”. “The sheer scale of the agency’s ambition is reflected in the

Read More →