Hello and welcome to the Friday, December 8, 2020,

edition of the Sandinet Storm Center's Stormcast.

My name is Johannes Ulrich, and today I'm recording from Jacksonville, Florida.

A couple of interesting diaries to talk about.

The first one here just came in as I got ready to start a recording here comes from

Eaching talk he works with the automated system security research group asset at

Singapore University of Technology and Design and they were looking into 5G implementation

vulnerabilities these vulnerabilities can be used for the they were looking into 5G implementation vulnerabilities.

These vulnerabilities can be used for denial of service attacks,

certainly not the most interesting type of attacks

when it comes to wireless communication,

but they can also be used to downgrade 5G connections to 4G connections, which of course then may open up the connection

to additional vulnerabilities. In some cases, the 5G denial of service issue would be

persistent in a sense that it would require a reboot in order to avoid it.

These vulnerabilities are currently being addressed by various manufacturers.

Now, there is a list of different specific devices that are vulnerable, but keep in mind

that it's typically like the chipset and the software coming with it that's

vulnerable here and that of course is the same across a wide range of additional manufacturers.

Be on the lookout for any updates here.

Aside from that, there isn't really that much you can do.

The vulnerabilities are mostly targeting 5G in standalone mode, which means that you're using 5G exclusively, sort of end-to-end.

Most networks these days actually are still in the non-stand-alone mode, at least in the US, the standalone mode just sort of came online.

...