Call Me Maybe: Eavesdropping encrypted LTE calls with ReVoLTE (2020) (montsecure.com)

This one is a few years old, but still thought the attack itself is highly interesting

(2019)

I think this is pretty interesting but has very limited applications / viability. There are so many other better ways to eavesdrop its sort of not worth the effort.