Everything worth knowing, nothing that isn't.
The SS7 stack, layer by layer
MTP (Message Transfer Part) is the transport; SCCP (Signalling Connection Control Part) adds global-title routing; TCAP (Transaction Capabilities) handles dialogues; and MAP (Mobile Application Part) is the mobile application layer that actually carries SMS and location operations. Over IP, SS7 rides on SIGTRAN. See /answers/ss7-map-explained and /answers/what-is-sigtran.
Why SS7 is a security concern
SS7 was designed for a small, trusted club of state telcos, so peers largely trust each other with no per-message authentication. That trust is abused for location tracking and SMS interception — most notoriously via SendRoutingInfoForSM harvesting. GSMA FS.07 and FS.11 define the signalling-firewall controls that close these holes; BroadNet operates one at /operators/ss7-firewall.