SHA-1 Is Terrible, Cable Modems Haunted By Flaw, SIM Swapping Gets Worse - ThreatWire
https://youtube.com/watch?v=HyyQAx8enMs
Duration:10:12 Published:14 Jan 2020
A major vulnerability affects modems, SIM swapping is still a huge threat, and SHA1 Still Sucks!
Cable Haunt:
https://threatpost.com/cable-haunt-remote-code-execution/151756/
https://www.zdnet.com/article/hundreds-of-millions-of-cable-modems-are-vulnerable-to-new-cable-haunt-vulnerability/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19494
https://cablehaunt.com/
https://github.com/Lyrebirds/sagemcom-fast-3890-exploit
SIM Swapping:
https://www.zdnet.com/article/academic-research-finds-five-us-telcos-vulnerable-to-sim-swapping-attacks/
https://www.issms2fasecure.com/assets/sim_swaps-01-10-2020.pdf
https://www.issms2fasecure.com/dataset
https://www.vice.com/en_us/article/5dmbjx/how-hackers-are-breaking-into-att-tmobile-sprint-to-sim-swap-yeh
https://www.vice.com/en_us/article/k7e8xx/sim-swapping-indictments-pile-up-as-congress-begs-the-fcc-to-do-more
SHA1:
https://en.wikipedia.org/wiki/SHA-1
https://arstechnica.com/information-technology/2020/01/pgp-keys-software-security-and-much-more-threatened-by-new-sha1-exploit/
https://eprint.iacr.org/2020/014.pdf