24 July 2023

REDACTED TELECOM TALK | Black Hat USA2023

 

Redacted Telecom Talk

Carlo Meijer  |  Founding Partner and Security Researcher, Midnight Blue
Wouter Bokslag  |  Founding Partner and Security Researcher, Midnight Blue
Jos Wetzels  |  Founding Partner and Security Researcher, Midnight Blue

Format: 40-Minute Briefings
Tracks
 Cryptography, 
 Hardware / Embedded

This talk will present an in-depth security analysis of a prominent telecommunications standard used globally by law enforcement, military, and critical infrastructure in the power, oil & gas, water, and transport sectors and beyond.

In this talk, we will discuss several severe flaws we uncovered allowing for practical interception and manipulation attacks by both passive and active adversaries. In addition, we will discuss the journey that enabled us to uncover these flaws which involved exploiting multiple zero-day vulnerabilities in a popular communications device and its trusted execution environment (TEE).

This talk will include a demonstration of interception capabilities as well as the publication of research materials in order to enable asset owners and the cyber-security industry at large to conduct further research on this important standard.

LINK: BlackHat USA 2023

No comments: