5G security flaws could let hackers steal your identity

5G
(Image credit: Shutterstock)

New research indicates that there are serious security flaws present in 5G network technologies that could enable hackers to cause significant disruption or even steal an individual’s identity. 

Worryingly, vulnerabilities have been discovered in both the existing non-standalone 5G networks and upcoming standalone networks.

A report from cybersecurity firm Positive Technologies explains that most mobile operators are currently offering 5G services running on non-standalone networks that are based on previous-generation 4G LTE infrastructure. However, with these networks at risk from vulnerabilities in the Diameter and GTP protocols, networks are gearing up to switch to standalone 5G network cores.

Unfortunately, as the Positive Technologies report sets out, the new networks remain at risk of attack. Vulnerabilities in the HTTP/2 and PFCP protocols used by standalone 5G networks could potentially allow attackers to steal subscriber profile data, impersonate individuals, and fake subscriber authentication.

Security scares

“There is a risk that attackers will take advantage of standalone 5G networks while they are being established and operators are getting to grips with potential vulnerabilities,” Dmitry Kurbatov, CTO at Positive Technologies, commented. 

“Therefore, security considerations must be addressed by operators from the offset. Subscriber attacks can be both financially and reputationally damaging - especially when vendors are in high competition to launch their 5G networks. With such a diverse surface of attack, robust core network security architecture is by far the safest way to protect users.”

Kurbatov also notes that as 5G standalone networks become more embedded within society, through the Internet of Things and other applications, the potential damage that could be caused by these vulnerabilities will only increase. Potentially, healthcare, transport, utilities, and many other essential areas of our lives could be disrupted.

TOPICS
Barclay Ballard

Barclay has been writing about technology for a decade, starting out as a freelancer with ITProPortal covering everything from London’s start-up scene to comparisons of the best cloud storage services.  After that, he spent some time as the managing editor of an online outlet focusing on cloud computing, furthering his interest in virtualization, Big Data, and the Internet of Things. 

Latest in Security
Isometric demonstrating multi-factor authentication using a mobile device.
NCSC gets influencers to sing the praises of 2FA
Sam Altman and OpenAI
OpenAI is upping its bug bounty rewards as security worries rise
A stylized depiction of a padlocked WiFi symbol sitting in the centre of an interlocking vault.
Dangerous new CoffeeLoader malware executes on your GPU to get past security tools
China
Notorious Chinese hackers FamousSparrow allegedly target US financial firms
A digital representation of a lock
NYU website defaced as hacker leaks info on a million students
NHS
NHS IT supplier hit with major fine following ransomware attack
Latest in News
Nintendo Switch 2 Joy-Con up-close from app store
Nintendo's new app gave us another look at the Switch 2, and there's something different with the Joy-Con
cheap Nintendo Switch game deals sales
Nintendo didn't anticipate that Mario Kart 8 Deluxe was 'going to be the juggernaut' for the Nintendo Switch when it was ported to the console, according to former employees
Three angles of the Apple MacBook Air 15-inch M4 laptop above a desk
Apple MacBook Air 15-inch (M4) review roundup – should you buy Apple's new lightweight laptop?
Witchbrook
Witchbrook, the life-sim I've been waiting years for, finally has a release window and it's sooner than you think
Amazon Echo Smart Speaker
Amazon is experimenting with renaming Echo speakers to Alexa speakers, and it's about time
Shigeru Miyamoto presents Nintendo Today app
Nintendo Today smartphone app is out now on iOS and Android devices – and here's what it does