Good technical summary is available here:
They tested against a live network. Pretty ballsy of the carriers who allowed it! A tip of my hat to them!
(They did it with carrier permission though, before you run off to replicate their findings)
Sorry for the terrible title. 36 new vulnerabilities were discovered, most of them denial of service it appears.
If you're looking for a good summary, this is the only article I was able to find: https://www.zdnet.com/article/researchers-find-36-new-securi...