{"id":10580,"date":"2024-10-01T11:31:41","date_gmt":"2024-10-01T10:31:41","guid":{"rendered":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/?p=10580"},"modified":"2025-10-21T15:53:03","modified_gmt":"2025-10-21T14:53:03","slug":"mobile-telecom-security-landscape-blog-october-24","status":"publish","type":"post","link":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/latest-news\/mobile-telecom-security-landscape-blog-october-24\/","title":{"rendered":"Mobile Telecom Security Landscape Blog: October 24"},"content":{"rendered":"\n

Welcome to our security threat landscape blog. Cybersecurity Awareness Month is this October<\/a>; it’s recognised as a dedicated month for promoting security and safety and encouraging both public and private sectors to work together to raise cybersecurity awareness. This blog focuses on the need for full awareness of one\u2019s inventory of equipment, software and services.<\/p>\n\n\n\n

In order to establish and operate effective security defences, it is necessary to understand the assets that make up the network\u2019s attack surface. This includes all the systems (development and operational), legacy equipment, people, processes and services used to operate, design and maintain the network. These assets can include hardware and server estate, cloud and other services, exposed network ports and the operational software stacks.  Each can benefit from inventory management to fully document the potential attack surface.  Once the full estate is understood, a comprehensive defensive strategy can be established.<\/p>\n\n\n\n

Reconnaissance<\/h2>\n\n\n\n

Many potential attacks begin with a reconnaissance phase to understand the potential attack surface and possible weaknesses. This can involve a whole range of items, including IP address \u2018pinging\u2019, port scanning and reviewing LinkedIn member profiles. This latter item is used to better to understand possible phishing attack guises, understand the target\u2019s likely levels of permission \/ privileges and what equipment vendors \/ products they are responsible for.<\/p>\n\n\n\n

The attack surface<\/h2>\n\n\n\n

In some cases, we see a reduction in attack surface through the sunsetting of some 2G and 3G networks and by disabling unnecessary services and features.  GSMA Intelligence<\/a> cites that between 2010 and Q2 2024, there were 137 network sunsets, of which around 50% were completed in the last three years.  However, there is also growth through deployment of stand-alone 5G cores, increased 5G radio access network deployment, disaggregated radio access networks (including O-RAN and virtualised RAN), introduction of new network APIs, extended supply chains, increased virtualisation infrastructure and the increasing number of connected devices, including smartphones, autonomous vehicles and other IoT equipment.  In aggregate, network attack surfaces are expanding.<\/p>\n\n\n\n

Attack vectors<\/h2>\n\n\n\n

There are a number of attack vectors that may seek to compromise inventory items and each requires strong security controls and processes to minimise the likelihood and impact of any attack:<\/p>\n\n\n\n