Karsten Nohl gave this presentation at the 2013 BlackHat conference in Las Vegas. “The protection pretense of SIM cards is based on the understanding that they have never been exploited. This talk ends this myth of unbreakable SIM cards and illustrates that the cards — like any other computing system — are plagued by implementation and configuration bugs.”
The presentation slides can be in PDF format.