P1 Security's mission is Securing Operators and Nation-states Critical Mobile Infrastructure to defend against cybersecurity threats and attacks

P1 Security

If you want a clear and honest look at how telecom networks were actually attacked in 2025, this session is for you. TelcoSec Talk: A Deep Dive into 2025 Attacks takes you inside the real incidents that kept operators awake this year, from long running infiltrations to large scale customer data compromises.

During this live technical walkthrough, you will see how attackers moved across roaming links, abused signalling protocols, exposed SIM keys, and took advantage of misconfigurations inside 4G and 5G cores. We will show you what really happened, why it worked, and what operators could have done to catch it earlier.

Our experts, El Mehdi Regragui and Kye Grundy, break down four major attacks step by step and explain the techniques, entry points, and behaviours that matter most for defenders. If you work in mobile network security, core operations, or regulatory oversight and you want practical insight instead of generic summaries, you will get real value from this deep dive.

By the end of the session you will have a clearer picture of today’s active threats, the gaps attackers consistently target, and the concrete actions that can help reduce exposure across SS7, Diameter, GTP, SIM authentication flows, and backend systems.


TelcoSec Talk: A Deep Dive

**Top 5G Security Vulnerabilities: Insights from P1 Security Pentest Activities**

As 5G continues to roll out globally, operators face new attack surfaces and risks. Drawing on real-world penetration testing engagements, this webinar highlights the most critical vulnerabilities found across signaling and OAM domains in 5G networks.

During this session, you will learn about:

*   **The top security vulnerabilities discovered during P1 Security pentest activities**
*   **Emerging risks affecting ongoing 5G deployments**
*   **Practical recommendations for mitigation and remediation to strengthen resilience**

🎙️ Presented by **El Mehdi Regragui**, 5G Penetration Tester at P1 Security

📅 Date: Wednesday, October 22nd, 2025

🕒 Time: 15:00 – 16:00 CET

📍 Format: Live broadcast

🔗 Register now to secure your spot


Top 5G Security Vulnerabilities: Insights from P1 Security Pentest Activities

**Exploring O-RAN Security**

**\[Webinar #10 – Thursday, July 3 | 16:00–17:00 CET]**

Open RAN (O-RAN) is rapidly gaining traction as a transformative approach to building mobile networks—bringing promises of cost efficiency, vendor interoperability, and innovation through open interfaces and disaggregated components. But while the benefits are clear, the security implications are far from fully understood.

In this technical webinar, P1 Security’s telecom security expert **Kye Grundy** explores the hidden risks and threat surfaces emerging from O-RAN deployments. We will cover real-world vulnerabilities affecting the O-DU, O-RU, and O-CU components, security gaps in interface protocols like E2 and A1, and how attackers may exploit orchestration layers and multi-vendor integration points.

You’ll also gain clarity on:

*   Common security misconfigurations in Open RAN deployments
*   The evolving threat landscape for disaggregated RAN architecture
*   Lessons learned from recent security assessments and testbeds
*   Recommendations for telecom operators and systems integrators looking to harden their O-RAN infrastructure

Whether you're involved in 5G rollouts, network security architecture, or vendor management, this session will help you understand how Open RAN security is reshaping the risk profile of mobile infrastructure—and what can be done to stay ahead of attackers.

> 🧭 **Content Level: 3/4 – Tech Overview**


Exploring O-RAN Security

P1 Security is launching the **VKB Webinar Series**, a deep dive into critical telecom vulnerabilities identified in our **Vulnerability Knowledge Base (VKB)**. This series will provide exclusive insights into real-world security threats, their impact on telecom networks, and practical strategies to mitigate risks. Led by industry experts Mahmoud Wahdan, Alexis Vernet, and Arthur Raout, each episode will break down a specific vulnerability, offering technical details and actionable solutions. Stay ahead of attackers by understanding the evolving threat landscape. Learn more about VKB [here](https://www.p1sec.com/product/vulnerability-knowledge-base) and access it directly [here](https://saas.p1sec.com/home).

### Upcoming Episode – **VKB Series #2**

📅 **Wednesday 28 May** | 🕒 **15:00 – 16:00 CET** | 🎥 **Live Broadcast**

*   **Speaker:** Arthur Raout, Cybersecurity Software Engineer
*   **Topic: Vulnerability #2349** – *Unauthenticated Remote Code Execution in Erlang/OTP SSH Server*

Join us as Arthur breaks down how this unauthenticated RCE flaw can be exploited in Erlang/OTP SSH servers, the potential impact on telecom infrastructures, and the mitigation steps you can start implementing right away.


VKB Series #2

P1 Security is launching the **VKB Webinar Series**, a deep dive into critical telecom vulnerabilities identified in our **Vulnerability Knowledge Base (VKB)**. This series will provide exclusive insights into real-world security threats, their impact on telecom networks, and practical strategies to mitigate risks. Led by industry experts Mahmoud Wahdan, Alexis Vernet, and Arthur Raout, each episode will break down a specific vulnerability, offering technical details and actionable solutions. Stay ahead of attackers by understanding the evolving threat landscape. Learn more about VKB [here](https://www.p1sec.com/product/vulnerability-knowledge-base) and access it directly [here](https://saas.p1sec.com/home).

### **Upcoming Episode – VKB Series #1**

📅 **26th March** | 🕒 **15:00 – 15:30 CET** | 🎥 **Live Broadcast**

🔹 **Speaker:** Alexis Vernet, Telecom Offensive Security Expert

🔹 **Topic:** **Vulnerability #2049** – A critical security flaw affecting the **5G Core Network**.

Join us as we analyze this vulnerability, its implications, and the security measures needed to mitigate it.


VKB Series #1

Join us for an in-depth webinar exploring the **security risks of international IP-based SIP networks** and the **effectiveness of SIP Intrusion Detection Systems (IDS)** in safeguarding these critical telecom infrastructures.

In an increasingly connected world, IMS networks are at the heart of modern communication. However, they face a growing array of international threats that demand advanced security designs and responsive detection systems. This session will provide valuable insights into the unique challenges of SIP-based networks and discuss strategies for enhancing their security.

### **Agenda Highlights:**

*   **IMS Networks**
*   **Security Designs & Implementation**
*   **International Threats**
*   **Detection & Response**
*   **Speak-Up Session**


Security risk of International IP based SIP network and effectiveness of SIP IDS

Join us to be part of the conversation around GT Leasing security and business impacts for Mobile Network Operators.

**Philippe Langlois**, Founder & CEO of P1 Security, and **Stephen Ornadel**, Senior Consultant at Symmetry Solutions, Former VP – Telecom Security Solutions at Mobileum, Chairman of the GT Leasing Task Force for GSMA and telecom security veteran, will discuss the threats and challenges from GT Leasing and how MNO's should protect their subscribers and revenue from bad actors.

Don’t miss this essential session with two of the brightest minds in the field.


GT Leasing - A Security vulnerability ?

The webinar features industry experts Philippe Langlois, CEO & Founder of P1 Security, security expert on mobile network protocols, and André Arnes, Partner, CyberSecurity at White Label Consulting, former CISO of Telenor Group.

This session will delve into key regulatory frameworks, real-world applications, and the challenges of implementing security controls in 5G networks. It aims to provide a deeper understanding of 5G security and practical strategies to ensure compliance and robust protection in the evolving digital landscape.


Aligning regulatory frameworks (such as NIS2) & TelcoSec guidelines for real world 5G security

Join our exclusive webinar as we delve into the dynamic landscape of 5G security. As the industry hurtles towards a 5G-enabled future, understanding the nuances of security readiness, market realities, and prioritized strategies is crucial. Our panel of experts will provide invaluable insights, offering a comprehensive overview of the current state of 5G security. From assessing your organization's readiness to identifying market trends and prioritizing security measures, this webinar equips you with the knowledge to thrive in the era of 5G. Don't miss this opportunity to stay at the forefront of 5G security innovation.


Navigating 5G Security Realities: Readiness, Priorities, and Market Insights

Presentation of the new version of our OpenSource tool - QCSuper

QCSuper is a tool which enables, for research purposes, to capture the contents of radio communication exchanges between your phone's antenna and your Mobile Operator's radio network ([RAN](https://en.wikipedia.org/wiki/Radio_access_network)).

QCSuper has enabled many telecom, mobile and security researchers to perform an analysis of the radio packets (frames) through saving these to the Packet Capture File format (PCAP, with GSMTAP encapsulation) and enabling to use the great Wireshark tool to conduct analysis and research.


New release: QCSuper v2.0

SMS remains a ubiquitous form of communication, powering a wide range of business operations, from customer support to marketing campaigns. However, this ubiquity has also made SMS a prime target for malicious actors, who utilize phishing and smishing attacks to exploit vulnerabilities and gain unauthorized access to sensitive information. These attacks can have devastating consequences, including financial losses, identity theft, and damage to brand reputation.

To mitigate these risks, a comprehensive approach to combating phishing and smishing threats at operator and country scale is essential. This webinar will delve into the latest strategies and best practices for addressing these threats

By attending this webinar, you will gain valuable insights into combating phishing and smishing attacks at scale and empowering your organization to operate securely in a world increasingly reliant on SMS communication.

Secure your business and your customers from the growing threat of phishing and smishing. Register for this webinar today and learn how to effectively safeguard your SMS communication channels.


Fighting phishing and smishing SMS threats at operator and country scale

MobileSecGPT is a groundbreaking AI model that has been trained on a massive dataset of mobile network security data. This data includes proprietary and public data from P1 Security, a leading provider of mobile security solutions.

MobileSecGPT is able to learn from this data to identify and classify mobile network security threats, including malware, phishing attacks, and data breaches. It can also generate reports and insights that help organizations understand their security posture and take steps to improve it.

During this webinar Philippe Langlois will demonstrate how to use MobileSecAI as well as how we see this assistant bring impact to the community


Introducing MobileSecGPT

Physical exposure still creates real compromise paths in modern mobile networks. This live session shares red team lessons learned on how compromise chains can start with physical access and evolve into broader telecom impact, including how defenders can break the chain early with practical, measurable controls.

**What you will learn:**

*   Where physical exposure still matters in modern mobile networks
*   Typical escalation patterns from initial foothold toward sensitive environments
*   Visibility gaps that delay detection and inflate response time
*   Defensive priorities that reduce blast radius and improve evidence during investigations

**Speaker:**

Philippe Langlois, Founder and CEO

**Date and time:**

Thursday 5 February 2026

14:00 to 15:00 CET

**Registration link:**

<https://watch.getcontrast.io/register/p1-security-physical-to-5g-core-compromise>

**Contact:**

<contact@p1sec.com>
