Security News > 2023 > April > How insecure is America's FirstNet emergency response system? Seriously, anyone know?

AT&T is "Concealing vital cybersecurity reporting" about its FirstNet phone network for first responders and the US military, according to US Senator Ron Wyden, who said the network had been dubbed unsafe by CISA. In a letter [PDF] sent to the US government's Cybersecurity and Infrastructure Security Agency and NSA, the senator called for an annual cybersecurity audit of FirstNet, citing a nearly half-decade old phone signalling protocol that miscreants and spies can exploit to track mobile devices and intercept their calls and texts.

It's a nationwide network intended to allow police, firefighters, and paramedics to transmit data and communications across multiple regions and jurisdictions without worrying about the transmissions being lost to overcrowded networks, particularly during disasters.

The FirstNet Authority prioritized cybersecurity in the planning for the public safety broadband network, and it continues to be a top priority for us today.

The FirstNet network is designed with a defense-in-depth strategy that goes well beyond standard commercial network security measures.

The FirstNet Authority performs robust and ongoing cybersecurity reviews of the network and will continue to work with its contractor, AT&T, as well as our public safety and federal partners, to deliver a highly secure, reliable network for America's first responders.

Further, if the government agencies and Congress can't get access to the FirstNet audits commissioned by AT&T, then these public bodies should commission their own annual audits, Wyden added.

News URL

https://go.theregister.com/feed/www.theregister.com/2023/04/12/firstnet_cybersecurity_audit_wyden/