📡 SS7 and Diameter remain a live attack surface inside telecom core networks A sponsored explainer on SS7 and Diameter outlines how signaling abuse can expose subscriber IMSIs, enable location tracking, redirect calls and SMS, and support account takeover via intercepted one-time codes. The article notes these attacks occur within carrier trust relationships rather than on the target device. Operationally, the key point is that telecom signaling still relies heavily on inherited trust and uneven defensive implementation. That leaves mobile identity, location privacy, and SMS-based authentication vulnerable at network level, beyond the reach of endpoint hardening alone. 🛰️ Open sources - closed narratives @sitreports

🔍 TeamViewer flaw turns remote hosts into attack surfaces A newly disclosed TeamViewer flaw allows a remote computer to attack the user who initiates a control session. The issue reverses the usual trust model of remote administration: instead of the controller posing the primary risk, the controlled endpoint can become the attacker during the connection. Operationally, this matters for help desks, MSPs, enterprise IT, and incident responders that routinely initiate sessions into untrusted or compromised machines. A vulnerable remote-control workflow can turn routine access into lateral exposure for privileged operators and their management infrastructure. 🛰️ Open sources - closed narratives @sitreports

🔍 Trezor flags suspected implant in Safe 5 wallet sold via CryptoBilis Trezor says it received a credible report of a tampered Safe 5 bought in Indonesia through CryptoBilis, with an extra board reportedly placed between the mainboard and screen, including a cellular module and antenna. The Safe 5 has not yet been examined by Trezor, but the company told potentially affected users to migrate funds and avoid devices bought via CryptoBilis from March 2026 onward. The case aligns with the earlier Ledger supply-chain compromise tied to the same reseller and points to reseller-layer tampering rather than a firmware-only threat. Trezor had already halted sales through CryptoBilis on 9 October and says device weight is not a reliable integrity check. 🛰️ Open sources - closed narratives @sitreports