In 2010 a number of practical high-profile attacks against GSM has been discussed and demonstrated. Still it should be noted that GSM ("2G") has been standardized in the early 90s, followed by the "3G" family of standards in 2000 which in turn is currently superseded (better: complemented) by yet another generation ("4G"). What about their security aspects? In this talk we'll outline 3G and 4G architectures and associated attack paths, enriched by "anecdotes from the field" and - potentially more interesting ;-) - results from some 3G/4G security testing "performed in the wild".