1988
9.5
CCITT Standardizes SS7 (Signaling System No. 7)
CCITT standardized the SS7 protocol suite in 1988 across mobile and fixed networks, built on implicit operator trust with no authentication — the root cause of every later signaling attack.
🌐GLOBAL
Intercept Log — Global Standards
014 RECORDS
2001
6.5
3G UMTS Standardization & 3G AKA Mutual Authentication Architecture
3GPP Release 99 standardized 3G UMTS, introducing bidirectional mutual authentication (3G AKA) to defeat rogue base stations (IMSI catchers) and replacing A5/1 with the KASUMI block cipher.
2007
8.8
Global Asterisk & FreePBX SIP Brute-Force Toll Fraud Wave
Automated botnets scanned global IP blocks for exposed SIP UDP port 5060, brute-forcing default extension credentials on Asterisk PBXs to route millions of unauthorized calls to high-cost premium-rate numbers in Somalia, Cuba, and Latvia.
2014
9.4
Regin Malware Discovery: Five Eyes Advanced Modular GSM/SS7 Telecom Core Spyware
Symantec and Kaspersky exposed Regin, an extraordinarily sophisticated nation-state malware platform specifically engineered to infiltrate GSM cellular base station controllers and telecom routing cores.
2015
9.2
LTE Diameter Signaling Interconnect Vulnerabilities Disclosed
Security researchers demonstrated that 4G LTE Diameter signaling networks inherited the unauthenticated trust vulnerabilities of SS7, allowing subscriber tracking and denial-of-service over IPX interconnects.
2017
9.1
GTP-C TEID Scanning & GPRS Core Tunnel Hijacking across Roaming IPX
Positive Technologies disclosed critical architectural flaws in GTP (GPRS Tunnelling Protocol) across 2G, 3G, and 4G networks, demonstrating how attackers on IPX roaming networks could hijack subscriber data sessions and execute over-the-air fraud.
2018
9.4
Operation Soft Cell: Nation-State Espionage Theft of Global Telco Call Detail Records (CDRs)
Cybereason revealed Operation Soft Cell, a massive multi-year cyber espionage campaign by suspected nation-state actors that completely compromised multiple telecommunications providers to exfiltrate raw subscriber Call Detail Records.
2019
9.8
LightBasin (UNC1945) Compromises 13+ Global MNO Core Networks
CrowdStrike revealed that the LightBasin (UNC1945) APT had compromised 13+ global telecom operators since at least 2016 using custom GTP and SS7 tooling to masquerade as roaming infrastructure.
2019
8.0
GSMA Formalizes Telecom Coordinated Vulnerability Disclosure (CVD) Program
The GSM Association launched its formal Coordinated Vulnerability Disclosure (CVD) program and Hall of Fame, establishing standard operating procedures for researchers to responsibly report 2G–5G protocol and core vulnerabilities.
2020
3.2
3GPP Standardizes 5G Standalone (SA) Security Architecture
5G Standalone (Release 16, 2020) replaced SS7/Diameter trust assumptions with HTTP/2 service-based APIs over TLS, OAuth 2.0 token authentication, and cryptographically concealed subscriber identities (SUCI).
2021
9.9
The Pegasus Project: Zero-Click Telecom & Mobile Surveillance Revelations
A global consortium of journalists revealed that NSO Group's Pegasus spyware had targeted 50,000+ phone numbers across 50 countries, utilizing zero-click SMS/iMessage parser vulnerabilities.
2023
9.4
RedEye / ChamelGang Linux eBPF Core Telecom Signaling Rootkit Discovery
Threat intelligence researchers uncovered RedEye / ChamelGang deploying custom eBPF (Extended Berkeley Packet Filter) kernel rootkits directly inside telecom core network servers to intercept subscriber GTP data and signaling stealthily.
2023
8.5
AI-Driven 5G NWDAF & Autonomous Reinforcement Learning Signaling Firewalls
3GPP and leading telecom vendors standardized the Network Data Analytics Function (NWDAF), integrating machine learning and deep reinforcement learning directly into 5G Core signaling planes to detect sub-second zero-day signaling exploits autonomously.
2026
9.4
3GPP Release 19 Post-Quantum Cryptography (PQC) Migration for 5G-Advanced & 6G Core (FIPS 203/204)
3GPP SA3 finalized Release 19 security specifications integrating NIST Post-Quantum Cryptography (FIPS 203 ML-KEM and FIPS 204 ML-DSA) to protect 5G subscriber privacy (SUCI) and inter-operator Service-Based Architecture (SBA) tunnels against Harvest-Now-Decrypt-Later threats.