June 2026

Published 2026-06-01

Silent-SMS scanning campaigns spike across LATAM

Silent-SMS location scanning against LATAM-terminated MSISDNs increased in Q2, targeted at diaspora populations. Operators using MAP-layer SMS monitoring detect the burst pattern; those relying on content filtering do not.

Silent SMS burst pattern signature

Signaling

Campaigns show as 8–20 Type-0 SMS to a single MSISDN over 30 minutes, sourced from rotating GTs. Signature is easy to detect at the SMSC/STP if operators log Type-0 traffic — many do not by default.

Open RAN xApp supply chain: first published CVE

RAN

A public advisory against a widely-forked open-source xApp template highlighted how third-party xApps become an operator supply-chain problem. WG11's xApp threat model gains renewed urgency.

EU 5G-related NIS2 enforcement clarifications

Regulatory

National regulators published clarifications on the "essential entity" scope for MVNO/MVNE operators under NIS2, expanding reporting obligations. Roaming and interconnect security posture is now in scope for compliance audits.