5G and 4G Core Networks Face New Security Flaws

Researchers have identified two major classes of vulnerabilities affecting modern mobile networks. A study from Singapore's Nanyang Technological University shows that the physical (PHY) layer of 3GPP 5G/NR and IEEE 802.11 Wi‑Fi can be exploited for passive, non‑intrusive surveillance, allowing attackers to perform "pseudo‑ranging" and track devices such as drones and vehicles with high precision.

A separate academic analysis uncovered 84 flaws in 4G and 5G core network implementations, including Open5GS, OpenAirInterface, free5GC, SD‑Core and eUPF. The vulnerabilities stem from an implicit‑trust model between core functions, enabling denial‑of‑service attacks and session hijacking if the interfaces become reachable over the internet. Both findings highlight the growing attack surface of cloud‑native telecom infrastructure and the need for stronger signal‑level obfuscation and stricter validation of core network messages.