Pinned post
Schedule: usenix.org/conference/woo…
Additionally:
* Monday 5.30 pm - Birds-of-Feather Sesssions
* Tuesday 4.30 pm - Demo/Poster Session and Happy Hour
in Harborside Ballroom C
Additionally:
* Monday 5.30 pm - Birds-of-Feather Sesssions
* Tuesday 4.30 pm - Demo/Poster Session and Happy Hour
in Harborside Ballroom C
www.usenix.org WOOT '26 Technical Sessions The 20th USENIX WOOT Conference on Offensive Technologies (WOOT '26) will take place at the Baltimore Marriott Waterfront in Baltimore, MD, USA, on August 10–11, 2026. The USENIX WOOT Conference aims... 
![Screenshot of the paper abstract for "CATANA: On the Dangers of SIM-Originating AT Commands".
The text states:
Hostile SIMs have been discussed as an attack vector against Mobile Equipment (ME) connected to cellular networks. One main attack path are proactive commands sent from the SIM to the victim device. In this work, we examine the threats posed by the RUN AT command which are SIM originating requests for the ME to execute a specified AT command, effectively creating a SIM AT interface.
To explore this interface, we introduce the CATANA toolkit and use it to analyze
real-world devices. Despite existing community knowledge on proactive commands and the dangers of AT commands, our investigation shows that SIM AT commands pose a significant security risk for MEs.
We survey 26 different MEs (8 IoT devices and 18 smartphones) and find that 9 expose the SIM AT interface, leading to the discovery of 4 vulnerabilities. [...]](/api/media?url=https%3A%2F%2Fpbs.twimg.com%2Fmedia%2FHPWxW9-WUAAtl02.png)
