Hacking 5G Is No Rocket Science

Explore the vulnerabilities in 5G networks and IoT infrastructure through this insightful conference talk from Nullcon Goa 2022. Delve into the integration of telcos with mainstream technologies like virtualization, SDN, cloud, and big data, and understand how these advancements create potential security risks. Learn about the new 5G core network's reliance on HTTP and REST API protocols, making them susceptible to web-like hacking techniques. Discover the "sweet spot" for attackers in the interface connecting sensors, cars, cities, and smart factories to mobile networks. Gain hands-on insights from real-world experiences across multiple countries and networks, revealing surprising vulnerabilities that allow remote attackers to compromise IoT infrastructure. Examine the discrepancies between standard security practices and actual implementations in production environments. Conclude with disclosure stories and defense strategies for mobile networks planning to roll out 5G technology, equipping yourself with valuable knowledge to address these emerging security challenges in the telecommunications industry.