On Thu, 2025-03-13 at 22:24 -0400, David Bray, PhD via Nnagain wrote:

Indeed. Yet here on ground SS7 remains vulnerable and exploitable too?

I'm working for a big telco in Europe, and I'm just marginally involved in the telco network.

AFAIK, in our infrastructure, SS7 is a niche in some very old equipment sitting somewhere.

On fixed broadband, we migrated everything over IP, voice is SIP, including VAS services, that are somehow fading away as well (IMS still in place for voicemail).

On 5G Standalone, everything is HTTP on the control plane and GTP encapsulation on the user plane.

I'm not an expert, but I wonder if the complexity has increased the potential attacking surface.

Cheers,
Tara