Some more info:
“This research specifically considers SIM cards which make use of a technology not used by most mobile operators,” the GSMA told PCMag in an email. ‘The potential vulnerability is understood to not be widespread and mitigations have been developed for affected mobile networks to implement.’
“AT&T and Sprint told PCMag they don’t use the affected technology on their SIM cards. Verizon says, ‘We have no indication to believe this impacts Verizon.’ T-Mobile has reportedly indicated the same.”
https://www.pcmag.com/news/370736/sim-card-flaw-poses-spying-threat-but-us-users-appear-to-be
I also read the vulnerability is limited to gaining your location. Anyone know if there’s a greater risk?