/
Navigation
Chronicles
Browse all articles
Explore
Semantic exploration
Research
Entity momentum
Nexus
Correlations & relationships
Story Arc
Topic evolution
Drift Map
Semantic trajectory animation
Posts
Analysis & commentary
Pulse API
Tech news intelligence API
Browse
Entities
Companies, people, products, technologies
Domains
Browse by publication source
Handles
Browse by social media handle
Detection
Concept Search
Semantic similarity search
High Impact Stories
Top coverage by position
Sentiment Analysis
Positive/negative coverage
Anomaly Detection
Unusual coverage patterns
Analysis
Rivalry Report
Compare two entities head-to-head
Semantic Pivots
Narrative discontinuities
Crisis Response
Event recovery patterns
Connected
Search: /
Command: ⌘K
Embeddings: large
TEXXR

Chronicles

The story behind the story

days · browse · Enter similar · o open

Research details how vulnerabilities in signaling protocols used by mobile network operators for international roaming can be exploited to geolocate devices

Gary Miller / The Citizen Lab :

The Citizen Lab Gary Miller

Context & Ripple Effects

Citizen Lab’s research extends a long-running record of signaling-layer exposure in mobile networks: SS7 weaknesses were previously tied to location tracking and communications interception, while later research identified 4G/5G attack paths that could also reveal a target’s location. The significance is that international roaming creates an inter-operator trust boundary where such flaws can affect subscribers beyond their home carrier.

The issue remains relevant across generations of mobile infrastructure: subsequent Citizen Lab coverage described spying campaigns abusing SS7 and Diameter weaknesses across 2G through 5G networks.

First-order effects

  • Mobile operators using vulnerable roaming-signaling paths face an immediate risk that a device’s location can be requested or inferred by an unauthorized party exploiting those protocols.
  • Subscribers’ location privacy depends not only on their own carrier’s controls but also on the security of roaming interconnections and counterpart networks.

Second-order effects

  • Operators and roaming partners are pressured to tighten signaling filtering, monitoring, and access controls, since a weakness at an interconnect can expose customers of other networks.
  • The findings reinforce that newer radio generations do not automatically eliminate signaling-layer risk: earlier 4G and 5G research also linked protocol flaws to targeted location tracking.

Third-order effects

  • If cross-network signaling trust remains broadly permissive, mobile privacy becomes a supply-chain security problem in which the weakest participating operator can affect users elsewhere.
  • The pattern points toward sustained scrutiny of legacy and transitional signaling systems, reflected in reported SS7 and Diameter abuse across 2G to 5G, rather than a clean security break with each new network generation.

The trend: Mobile-network security is shifting from a focus on radio-generation upgrades toward securing the inter-operator signaling and trust layers that persist across them.

Discussion

  • @pboehler@mastodon.social Patrick Boehler on mastodon
    From November 2022 to June 2023, five different SS7 GTs allocated to GTel/Gmobile were seen conducting surveillance operations targeting mobile users in African countries based on threat telemetry outputs from firewalls deployed in multiple mobile networks. https://citizenlab.ca/…
  • @citizenlab @citizenlab on x
    This report, co-authored by Citizen Lab's Gary Miller and former senior research associate @caparsons is a field guide to the security risks around the mobile cellular ecosystem, with a focus on location disclosure [image]
  • @paulcadario Paul Cadario on x
    Another great @citizenlab report on how your phone helps locate you. Anywhere. “The next time you step off that plane in a foreign country and boot up your device, take a moment to contemplate who might be interested in ... finding you.” https://citizenlab.ca/...
  • @rondeibert @rondeibert on x
    New @citizenlab report 🚨 details the technical vulnerabilities at the heart of the world's mobile communications networks ⬇️ https://citizenlab.ca/...