Skip to main content
Latest research
Article

Securing the RAN #4: From Security Standards to Operational Defense

A practical guide to operationalizing RAN security through base-station hardening, secure cryptographic and key-management practices, proactive threat detection, telemetry analysis, interface protection, and Zero Trust principles across 5G and O-RAN environments.

Sep 22, 2026 · 12 min read

Latest advisories

View all
7.2 CVE-2026-41510 Coraza WAF

Coraza WAF Body Processors: SecArgumentsLimit Bypass Causes Memory-Exhaustion DoS

Osama Ali· Oct 2, 2026
8.6 CVE-2025-15517 Archer NX600 +3

Multiple TP-Link Routers: Authorization Bypass in HTTP Server

Saifeldeen Aziz· Mar 23, 2026
8.5 CVE-2025-15605 Archer NX600 +3

Multiple TP-Link Routers: Hardcoded Configuration Encryption Key

Saifeldeen Aziz· Mar 23, 2026

Recent posts

All posts
Article

Detection or Proof: Rethinking the Central Question Behind WAFs

This paper challenges the idea that WAFs should rely primarily on attack detection. It proposes a risk-based architecture where lower-risk endpoints use detection and anomaly analysis, while high-risk functions require validation of structure, authorization, context, and business logic. The paper concludes that effective WAF security is fundamentally a risk-routing problem.

Ahmed Maghawry · Oct 5, 2026 · 6 min
Article

Addressing Modern SOC Challenges with Agentic Approaches

Modern SOCs are under increasing pressure from alert overload, fragmented investigations, scattered expertise, and complex incident coordination. This article explores how Agentic SOCs use AI agents to connect and streamline the security lifecycle, from alert triage and investigation to response and reporting, while preserving context, reducing repetitive work, and keeping human analysts focused on critical security decisions.

Cyshield Team · Sep 10, 2026 · 9 min
Article

Securing the RAN #3: Security in Standardization Evolution from 3G to 5G-Advanced

How 3GPP has systematically hardened RAN security from 3G through 5G-Advanced, from SUCI encryption defeating IMSI catchers to Zero Trust O-RAN interfaces and next-gen protections for IoT, sensing, and satellite networks.

Cyshield Team · Aug 23, 2026 · 14 min
Whitepaper

Introducing SAFE: A Complete Assurance Framework for SIM Security

SAFE (SIM Card Assurance Framework) is an evidence-based framework that helps mobile operators, vendors, regulators, and auditors assess SIM and eSIM security across the entire lifecycle. Learn how SAFE transforms fragmented compliance into continuous, measurable assurance, and download the full white paper.

Cyshield Team · Aug 12, 2026 · 2 min
Article

The Invisible Attack Surface: What Vulnerability Scanners Are Not Telling You!

Traditional vulnerability scanners only see known assets, leaving unknown systems and exposures invisible. As cloud, APIs, and third-party services expand the attack surface, continuous discovery becomes critical. This post shows how Attack Surface Management fills that gap by uncovering hidden risks before attackers do.

Ahmed Maghawry · Aug 9, 2026 · 7 min
Article

WAF Evasion 101: How Attackers Bypass “Security Gates”

Attackers reshape the same malicious payload just enough that the WAF no longer recognizes it, while the backend still executes it exactly as intended. This post walks through the real evasion playbook (encoding tricks, token splitting, noise injection, and reinforcement-learning-driven automated probing) and shows why the problem is structural, not a matter of sloppy engineering.

Ahmed Maghawry · Jul 27, 2026 · 14 min