Written by CRAIG YOUNG, KEN WESTIN AND T.K. KEANINI | 20 February 2015

Knowledge of security keys used in SIM cards can have wide reaching consequences. As prior research (https://media.defcon.org/DEF%20CON%2021/DEF%20CON%2021%20presentations/Karl%20Koscher%20and%20Eric%20Butler-Updated/DEFCON-21-Koscher-Butler-The-Secret-Life-of-SIM-Cards.pdf) has described, SIM cards are much like little computers with the ability to run applications at a lower level than the phone’s operating system (i.e. Android or iOS). Information obtained by hacking the SIM manufacturer could not only be used to decrypt protected phone communication but it could also likely be used to deploy malicious Java applets to targeted SIM cards by way of special SMS messages or signals from fake cell towers (referred to as sting rays in law enforcement terms). This also potentially opens up new techniques for sophisticated MiTM attacks against cellular data connections authenticated by the compromised SIM cards.--- Craig Young, CyberSecurity Researcher for Tripwire

Written by JOSEPH RUTTER | 19 February 2015

Clavister has received a renewed order from one of South East Asia’s largest telecommunications providers, signing an agreement to secure business critical infrastructure used by its millions of subscribers.