Je m'intéresse à la sécurité mobile depuis un paquet d'années, et cette attaque-là, je ne l'avais jamais vue. Le point de départ n'est ni le réseau, ni un SMS piégé, ni une appli vérolée. C'est la carte SIM elle-même ! En effet, des chercheurs de l'université de Birmingham et de Fuzzware lui ont fait donner des ordres au modem qui l'héberge.

Le mécanisme s'appelle RUN AT et c'est une commande proactive puisque la carte ne se contente pas de répondre à l'appareil, mais elle lui demande aussi d'exécuter une commande AT. C'est ce même langage qui pilote les modems depuis le Hayes Smartmodem de 1981 donc autant dire qu'on a là, une vraie console générique dispo sur un bout de plastique.

Et sur une borne de recharge Autel, ça donne tout simplement une exécution de code. Le module Quectel qui l'équipe, fait passer le texte reçu dans un appel shell, avec une liste noire de caractères censée bloquer les échappements. Mais un simple retour à la ligne passe au travers... Et voilà comment 2 étapes plus loin, les chercheurs sont parvenus à faire tourner leur propre code, piloté depuis la SIM. Décidément, les bornes de recharge collectionnent les mauvaises surprises .

Autre exemple sur un smartphone OPPO Reno 14 F 5G, où une seule commande coince le téléphone en 2G... Son propriétaire ne peut alors plus revenir en arrière : ni le mode avion, ni la sélection manuelle du réseau, ni la désactivation de la SIM dans les réglages ne permet de restaurer de la 5G ou de la 4G. Or la 2G n'a pas d'authentification mutuelle, donc une fausse antenne redevient un facteur de risque sur ce genre de matos récent. Deux autres commandes éteignent même le téléphone ou tuent son modem.

Reste la condition d'entrée, et elle est lourde : la carte doit déjà être hostile. Cela passe au choix par un échange physique, un interposeur glissé sous la puce, un opérateur compromis, ou du sabotage en usine... Mais surtout, rien là-dedans n'exploite de bug exotique. En fait, cette capacité est écrite dans les spécifications cellulaires, ce qui fait dire au chercheur Marius Muench que ces attaques sont conformes au standard.

Maintenant sur votre téléphone perso, le scénario d'une telle attaque reste assez serré. Mais sur un boîtier 4G oublié dans un local technique, beaucoup moins. Sur 26 appareils testés, 9 exposent l'interface, dont 6 modems IoT sur 8, contre 3 téléphones sur 18. Par contre, ni iPhone ni Pixel ne sont faillibles et Qualcomm a préparé une configuration durcie qui la coupe par défaut. De son côté, Quectel travaille encore dessus...

Bref, si vous exploitez des équipements cellulaires sur le terrain, une seule question au fournisseur du module suffit : RUN AT est-il activé, et peut-on le couper ? Notez qu'aucune attaque de ce type n'a été signalée pour le moment.

Source

Google's August Android 17 update fixes Pixel 10 gaming, GPU, and touchscreen issues while bringing the latest security patch to supported Pixel devices.

The post Google Rolls Out August Android 17 Update With Pixel 10 Stability Fixes appeared first on TechRepublic.

Samsung’s Galaxy Z Fold8 leads record foldable preorders in the US and South Korea as more buyers move from Flip models to the larger Fold lineup before launch.

The post Samsung: New Galaxy Foldables Beat Previous Preorder Record by 30% appeared first on TechRepublic.

A new leak claims Honor’s Robot Phone will feature two 200MP cameras, a motorized gimbal, a 7,060mAh battery, and 120W charging.

The post Honor Robot Phone Specs Leak Ahead of Aug. 12 Debut: What Users Can Expect appeared first on TechRepublic.

Android app teams can inherit location-sharing behavior from advertising SDKs even when consent screens and Play disclosures do not reflect it.

The post Android App Advertising SDK Location Data Sharing Explained appeared first on TechRepublic.

Leaked Google Pixel 11 marketing materials suggest a new HiLight notification feature, while a five-minute charging claim raises questions ahead of Google's launch.

The post Google Pixel 11 Leak Reveals ‘HiLight’ Notification Feature, Raises Questions About Charging Claim appeared first on TechRepublic.

Apple briefly removed Telegram from the App Store over reported CSAM, highlighting moderation failures and the distribution power held by app-store operators.

The post Apple Briefly Removes Telegram From App Store Over Reported CSAM Violation appeared first on TechRepublic.

Motorola patented a smartwatch that could one day transform into a phone. See how it works, who might use it, and what could keep it from reaching stores.

The post Motorola Patents a Wearable that Could Transform From Watch to Phone appeared first on TechRepublic.

Samsung’s rumored Galaxy S27 Pro may share several premium features with the S27 Ultra, but new leaks suggest clear differences in zoom cameras, display size, S Pen support, batteries, and regional processors.

The post Samsung Galaxy S27 Pro May Not Be the Smaller Ultra Buyers Expect appeared first on TechRepublic.

Luxury hotels have always had a location problem. The kinds of places that would make the most extraordinary backdrops, remote desert plains, rolling highland meadows, dramatic canyon edges, are almost never the places where a hotel can legally or practically be built. Extending infrastructure to those sites, from power grids to road access to permanent foundations, tends to either cost too much or damage the very landscape that made the location worth visiting.

The Mobiltels concept approaches hospitality from a completely different direction. Rather than building a permanent structure and hoping the location is compelling enough, each Mobiltel unit is designed to fold into a compact, truck-towable trailer, be driven to wherever the landscape is most remarkable, and then unfold into a functioning luxury accommodation. When the stay is over, it packs up and leaves without leaving much evidence behind.

Designer: Michael Jantzen

Three distinct unit types make up the proposed resort ecosystem. The first is the guest accommodation module, which deploys into two full hotel-style rooms, each with a private bath and its own private deck. The roof extends into a communal deck shaded by solar panels that generate the electricity to power the unit, while a second panel mounted on the exterior heats the water. The entire structure, decks and all, folds back into a trailer tight enough to tow down a highway.

The second unit is a solar-powered café and coffee shop that unfolds to reveal four outdoor dining decks with full kitchen and restroom facilities. The third is a large shade structure intended for gatherings, private events, and communal lounging, built as a striking open lattice that collapses into a flat-load trailer for transport. Additional unit types can theoretically follow the same logic, meaning a full resort amenity list could be assembled and disassembled as needed.

The off-grid energy system is what makes the location independence real rather than theoretical. Every unit generates and manages its own power and heated water from the sun, which means no connecting to local utilities and no requiring a serviced campsite. A Mobiltel cluster can go where a road exists and terrain is flat enough to level a trailer, which is a much lower bar than conventional construction.

The environmental argument is also embedded in the temporariness. A permanent hotel in a wilderness setting modifies that setting permanently. Roads are built, foundations are poured, and the land around the structure gradually changes to accommodate the infrastructure. A Mobiltel unit lands on a site for a season, its occupants absorb the specific quality of that place, and it leaves. The landscape recovers. The next location gets the same treatment.

There’s something quietly subversive about applying a mobile home chassis to a luxury hospitality concept. Mobile homes occupy a very specific cultural position, one that doesn’t usually include rooftop communal decks and solar-heated private baths. The Mobiltels concept borrows the transport logic of one and applies it to the aesthetic ambitions of the other, with the result that a high-end resort becomes as relocatable as a food truck. The result sits somewhere between architecture and expedition equipment, which is probably exactly the right place for it.

The post The Luxury Hotel Concept That Works Like a Food Truck for Wilderness first appeared on Yanko Design.

OnePlus is closing its North American Community on August 16. Learn how to save your posts, photos, guides, and files before they become inaccessible.

The post OnePlus Community Is Ending: What Users Should Save First appeared first on TechRepublic.

Samsung’s Galaxy S26 FE could cost more than its predecessor, raising questions about whether the Fan Edition still offers strong value.

The post Galaxy S26 FE Price Leak Follows Samsung’s Mobile Profit Slide appeared first on TechRepublic.

Samsung’s Galaxy Z Flip8 costs less and has longer support, while Motorola’s Razr Ultra leads on storage, RAM, battery, charging, and cover-screen apps.

The post Samsung Galaxy Z Flip8 vs Motorola Razr Ultra: Which Is Right for You? appeared first on TechRepublic.

Higher Qualcomm chip prices could push Android manufacturers to reuse older processors, trim specifications, or sell different hardware configurations across regions.

The post Qualcomm Price Hike Could Deepen Android Hardware Fragmentation appeared first on TechRepublic.

Google canceled its AI Studio mobile app one day before launch despite 800,000 pre-registrations and plans to move app-building features into Gemini.

The post Google Got 800,000 Sign-Ups for an AI App — Then Canceled It appeared first on TechRepublic.

Apple's September 2026 event could bring the iPhone 18 Pro, Apple's first foldable iPhone and new Apple Watches. Here's what the most credible rumors suggest.

The post Apple September Event Predictions: iPhone 18 Pro and Other Rumors Ranked appeared first on TechRepublic.

Thinking about importing the OnePlus 16? Learn what OnePlus' US and Europe exit means for availability, warranty, software support, and compatibility.

The post OnePlus 16 May Skip the US and Europe: What Buyers Need to Know appeared first on TechRepublic.

Qualcomm will raise processor prices for products shipped after September 1, adding new cost pressure for Android phone makers and future devices.

The post Qualcomm Confirms Snapdragon Price Hike, Android Phones May Cost More appeared first on TechRepublic.

Samsung’s record second-quarter earnings masked losses in its consumer-device businesses, making the Fold8 lineup more important to its Asia mobile strategy.

The post Samsung Earnings Put New Foldables at the Center of Its Asia Strategy appeared first on TechRepublic.