Nine of 26 Tested Devices Took Commands From Their SIM Cards

Researchers found that nine of 26 tested phones and cellular IoT modules accepted modem commands from a hostile SIM, enabling effects from lost connectivity to code execution. The attack requires control of a SIM or eSIM, and vendors have already patched or hardened several affected systems.