CISA flags Cisco BroadWorks flaw as actively exploited in attacks
Unauthenticated XXE CVE-2026-20320 lets attackers read BroadWorks files; FCEB agencies must remediate by November 24.
Stories per day · 30 days
3 RSS
Relatedcisco-broadworks2deepseek2diameter2kev2xxe25g16g1ai-hacking1averat1award1bpfdoor1broadworks1caller-id1campaign1cisco1cnap1fileless1fortijump1
31 stories, newest first · one card per story
Stories tagged #telecom
NVIDIA Open Sources Tools to Accelerate 6G Research
NVIDIA AI Aerial and Sionna tools have seen 10x adoption growth with over 8,000 institutions using them for 6G development.
SS7 and Diameter signaling flaws can track and intercept phones
Attackers on the carrier signaling network can locate phones and redirect calls and SMS without touching the device.
MASAR links telecom architecture threats to protocol attack paths
On a 5G-ready IMS, it models SIP early-media billing bypass and Diameter Cx disclosure using MiniZinc.
Rapid7 Intelligence Wins the 2026 Péter Szőr Award for Outstanding Research
Rapid7 Intelligence won Virus Bulletin's 2026 Péter Szőr Award for BPFDoor telecom research.
PEERSTITCH malware: How Attackers Compromised 500 Firewalls Through FortiManager
Unit 42 says PEERSTITCH, planted through FortiManager flaws, exposed material for more than 500 firewalls.
9
India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1
India will require telecoms to show registered caller names on 4G and newer networks from November 1, 2026.
What the BPFDoor backdoor tells us about attacks on the network edge
Rapid7 says BPFDoor stays silent on Linux edge devices until a magic packet arrives.
Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan
Linux backdoors impersonating SpamSniper and ShareTech target telecom appliances in South Korea and Taiwan.
Why Telecom Operators Are Building Their AI Strategy on Open Models
NVIDIA says telecom operators favor open models and released a 30B Nemotron 3 telco model.
AXON Datum enforces data access policies before AI systems act
AXON Networks launched Datum to enforce data access and residency policies before AI systems act.
3
New Stealthy Linux Backdoors Target Telecoms, Masquerade as Email Traffic
Rapid7 documents stealthy Linux backdoors—BPFDoor, Rekoobe, and new AVERAT implant—targeting telecom and network-edge appliances in South Korea and Taiwan.
.png&w=828&q=75)
SMTP is the key: BPFDoor and AVERAT hitting the network edge
Rapid7 details BPFDoor and AVERAT Linux implants disguised as telecom-edge software in South Korea and Taiwan.
Microsoft Warns NeedyMantis Malware Enables Persistent Network Access
Microsoft warns China-linked NeedyMantis malware maintains persistent access in telecom, university, and government networks.
1
Former US soldier gets nearly six-year sentence for hacking, extorting telecoms
Ex-soldier Cameron Wagenius was sentenced to 70 months for hacking and extorting US telecoms.
2
Ex-soldier's telecom hacking spree earns him 70 months
Former US soldier Cameron Wagenius was sentenced to 70 months for hacking telecom firms and seeking $1 million.
1
US soldier gets 70 months in prison for extorting 10 tech, telecom firms
A former US Army soldier received 70 months for hacking and extorting at least 10 tech and telecom firms.
1
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
A U.S. Army soldier received 70 months for extorting AT&T and Verizon after stealing call metadata.
3
Inside the Telecom Attack Surface: SS7, BGP Hijacking, and the Technical Reality of Nation-State Intrusions
Nation-state actors abuse SS7, BGP, and unpatched telecom routers, including Salt Typhoon persistence via GRE tunnels.
Lawmakers introduce bill for voluntary telecom cyber rules after Salt Typhoon hacks
Sens. Warner and Cruz introduced a bill for voluntary telecom cybersecurity practices after Salt Typhoon.
Bipartisan Senate leaders introduce bill to bolster telecom cybersecurity in response to Salt Typhoon hacks
Senators Warner and Cruz introduced a bill for voluntary telecom cybersecurity standards after the Salt Typhoon campaign.
3
Kyiv internet providers report major outages after Russian attacks damage data centers
Russian strikes damaged Kyiv data centers, disrupting internet for about 100,000 households.
India forces caller-ID apps to feed spam reports to telcos
India's TRAI now requires caller-ID apps like Truecaller to share spam reports with telcos and forces AI voice callers to declare A2P usage.
FRAUDSkill: Structured Frozen-Weight Skill Optimization for Audio Anti-Fraud Detection
FRAUDSkill adapts frozen audio-language models for telecom fraud detection via external skill programs, reaching 73.50% Macro-F1.