⚡️First eSIM Hack Hints at Phone Backdoors

A Polish security lab just hacked the eUICC—the chip that manages SIMs and stores carrier secrets. They targeted IoT devices running Kigen OS, which powers over 2 billion SIMs worldwide. By exploiting insecure Java applets, they gained access to protected memory, cloned SIMs, and exposed sensitive data that was supposed to stay locked away.

Read full article on Substack.

Even worse, Oracle shrugged off responsibility. Vulnerable Java Card setups could exist across major devices—Samsung, Apple, and possibly others.

This is why we built Above DataSIM. It skips phone numbers and SMS entirely, eliminating the usual attack surface. Pair it with Above Phone, which runs GrapheneOS out of the box, and a VPN, and you’ve got layered, resilient protection against emerging threats like this one.

🤖 Follow the show
👩‍💻 Get private phones, laptops, and tablets
📲 Learn more on our webinars
🏫 Sign up for our back to school webinar