News
Firm Identifies Significant Security Risks in Widely used Cinterion Modems

Kaspersky ICS CERT researchers have detected critical vulnerabilities in Cinterion cellular modems. The discovery showcases flaws that allow a remote unauthorised attacker to execute arbitrary code, constituting a major threat to millions of industrial devices. Kaspersky experts presented details on these vulnerabilities at OffensiveCon in Berlin, on May 11.
Kaspersky ICS CERT identified severe security vulnerabilities in Cinterion cellular modems, widely deployed in millions of devices and vital to global connectivity infrastructure.
These vulnerabilities include critical flaws that permit remote code execution and unauthorised privilege escalation, posing substantial risks to integral communication networks and IoT devices foundational to industrial, healthcare, automotive, financial and telecommunications sectors.
Among the vulnerabilities detected, the most alarming is CVE-2023-47610, a heap overflow vulnerability within the modem’s SUPL message handlers. This flaw enables remote attackers to execute arbitrary code via SMS, granting them unprecedented access to the modem’s operating system.
This access also facilitates the manipulation of RAM and flash memory, increasing the potential to seize complete control over the modem’s functionalities—all without authentication or requiring physical access to the device.
Further investigations exposed significant security lapses in the handling of MIDlets, Java-based applications running on the modems.
Attackers could compromise the integrity of these applications by circumventing digital signature checks, enabling unauthorised code execution with elevated privileges.
This flaw poses significant risks not only to data confidentiality and integrity, but it also escalates the threat to broader network security and device integrity.
“The vulnerabilities we found, coupled with the widespread deployment of these devices in various sectors, highlight the potential for extensive global disruption. These disturbances range from economic and operational impacts to safety issues.
“Since the modems are typically integrated in a matryoshka-style within other solutions, with products from one vendor stacked atop those from another, compiling a list of affected end products is challenging.
“Affected vendors must undertake extensive efforts to manage risks, with mitigation often feasible only on the telecom operators’ side. We hope that our in-depth analysis will help stakeholders implement urgent security measures and establish a valuable reference point for future cybersecurity research,” says Evgeny Goncharov, head of Kaspersky ICS CERT.
To counter the threat posed by the CVE-2023-47610 vulnerability, Kaspersky recommends the only reliable solution: disabling nonessential SMS messaging capabilities and employing private APNs with strict security settings.
Regarding the other zero-day vulnerabilities registered under CVE-2023-47611 through CVE-2023-47616, Kaspersky advises enforcing rigorous digital signature verification for MIDlets, controlling physical access to devices, and conducting regular security audits and updates.
In response to these discoveries, all findings were proactively shared with the manufacturer prior to public disclosure. Cinterion modems, originally developed by Gemalto, are cornerstone components in machine-to-machine (M2M) and IoT communications, supporting a wide array of applications from industrial automation and vehicle telematics to smart metering and healthcare monitoring.
Gemalto, the initial developer, was subsequently acquired by Thales. In 2023, Telit acquired Thales’ cellular IoT products business, including the Cinterion modems.
News
DBN Awards N13m in Grants to Tech Startups

Development Bank of Nigeria (DBN) has awarded a total of N13 million in grants to three standout tech startups at the 2025 Techpreneur Summit held in Lagos, reinforcing its commitment to innovation and inclusive growth among Nigeria’s micro, small, and medium enterprises (MSMEs).
The winners include: BuyScrap, a digital marketplace for recyclable materials – N6 million; Qiqi Farms, which connects local farmers to hospitality and export markets – N4 million; Eco-Cyclers, a youth-led recycling initiative based in Enugu – N3 million
Alongside the grant awards, DBN also launched a new digital data asset, a first-of-its-kind platform aimed at enabling data-driven decisions within the MSME ecosystem.
The platform offers deep insights into business trends, sector-specific challenges, and growth opportunities—supporting smarter policymaking and targeted investments.
In his keynote address in Lagos, Tony Okpanachi, managing director/ CEO, DBN, described the event’s theme, “CTRL + SHIFT: Tech Empowered Movement for Naija,” as a strategic call to reimagine enterprise development in Nigeria.
“This isn’t just a keyboard shortcut,” he said. “It’s a mindset reset—powered by technology—to build a more inclusive, innovative, and resilient business landscape. From financing to innovation, DBN remains committed to enabling MSMEs to thrive.”
Okpanachi emphasized that the Summit aligns with DBN’s AMPLIFI Strategy, which integrates digital transformation, sustainability, and scalability into its core programs.
He highlighted initiatives such as the Digital Shift Workshops and the Eco-Innovation Challenge as key steps toward embedding innovation in Nigeria’s MSME sector.
Encouraging young innovators, he added: “The future belongs to those bold enough to imagine and build it. DBN is proud to support the ideas that will shape tomorrow.”
A major highlight was the unveiling of the DBN Data Asset—a digital platform designed to provide real-time, evidence-based insights into Nigeria’s MSME landscape.
The platform combines DBN’s proprietary data with external sources like the National Bureau of Statistics (NBS) to offer a comprehensive view of MSME performance by region and sector.
Jeremy Dan Okayi, DBN’s Head of Strategy, Policy & Innovation, described the platform as: “A reservoir of insight, potential, and direction—built on two years of collaboration and shared vision. This tool will support informed decision-making across the public and private sectors.”
News
FCCPC Shuts France, Belgium, and Italy Visa Centres in Abuja Over Alleged Consumer Rights Violations

In a bold enforcement action, the Federal Competition and Consumer Protection Commission (FCCPC), supported by the Nigeria Police Force and the Nigeria Security and Civil Defence Corps (NSCDC), has sealed off the visa application centres of France, Belgium, and Italy in Abuja over alleged consumer protection breaches and obstruction of regulatory investigations.
The affected centres—located at Mukhtar El-Yakub House in the Central Business District and operated by TLS Contact, a Teleperformance Company—were shut down following reports that they refused to accept formal correspondence from the FCCPC regarding a consumer complaint. The Commission cited further infractions, including obstruction of investigation and alleged assault of its officers during lawful duties.
Speaking to journalists at the scene, Mrs. Boladale Adeyinka, Director of Surveillance and Investigations at the FCCPC, explained: “This is an enforcement operation against TLS. On March 25, 2025, we served them a letter to address a consumer complaint, which they refused to accept. Instead, TLS officers assaulted our team, and in a subsequent visit on June 17, they also allegedly assaulted uniformed police officers.”
Citing Section 33 of the Federal Competition and Consumer Protection Act (FCCPA), Mrs. Adeyinka emphasized that failure to comply with Commission directives constitutes a criminal offense, punishable by imprisonment, fines of up to ₦20 million, or both.
TLS has been ordered to appear before the Commission on June 20, 2025, to provide testimony, submit evidence, and make formal depositions. The company may be held liable for any financial losses suffered by applicants due to the disruption of visa services.
Despite multiple requests for comment, management at TLS Contact declined to respond as of press time.
News
How and Why N210 Trillion is Missing in NNPCL – CFO

Adedapo Segun, chief financial officer (CFO), Nigerian National Petroleum Company Limited (NNPC), has explained why there is a missing sum of N210 trillion in the company’s audited financial statement spanning from 2017 to 2023.
According to Segun, the missing funds are cash calls requested by joint venture (JV) partners and settlement to the JVs.
He spokeat a session of the Senate Committee on Public Accounts chaired by Aliyu Wadada.
Segun was responding to an alarm raised by the committee over missing N210 trillion in NNPCL’s audited financial statement.
Recall that Wadada issued a one-week ultimatum to NNPCL to account for the missing N210 trillion.
Reacting, Segun said, “The N103 trillion and N107 trillion are made up of joint venture cash calls that have been requested by the JV operators and JV cash call payments made by NNPCL, which are yet to be reconciled because governance procedures were not done at that time.
“That is why you see the description reflecting those two items would be washed out because they are two sides of the same transaction, which is the cash calls by JV partners and the settlement by NNPCL.”
However, Habu Sadeik, a financial analyst, in a post on X on Thursday, said Segun’s response was unsatisfactory.
Saidik faulted NNPCL’s response about the fund discrepancies, noting that something is not right with the audited financial statement.
“Forget about the senators’ lack of knowledge.
“The CFO’s response is not satisfactory. Are you saying that cash calls worth hundreds of trillions are just appearing on your FS only in 2024 without 31 disclosure?
“If it’s a cash call, why hasn’t the disclosure said so?
“Which cash call is over 100 trillion?
“Something is definitely not right, and I hope they retrospectively correct that FS.
“Someone somewhere did a chef’s work,” he wrote on X.
- Telecom1 day ago
Over 1m Nigerians Reached through MTN Staff’s Digital and Community Outreach
- General News1 day ago
NASRDA, Galaxy Space Firm Sign MoU on Satellite Connectivity
- Telecom1 day ago
Mafab Gets 0724 Number Series, Launches Mcom 5G Brand
- News1 day ago
DBN Awards N13m in Grants to Tech Startups
- News1 day ago
FCCPC Shuts France, Belgium, and Italy Visa Centres in Abuja Over Alleged Consumer Rights Violations
- News2 days ago
How and Why N210 Trillion is Missing in NNPCL – CFO
- News2 days ago
PalmPay, Glo Launch “Recharge and Win Bonanza 2” with Exciting Prizes
- General News2 days ago
IHS Nigeria, United Nations Global Compact Host High-Level Dialogue on Sustainability and Greener Business Practices in Nigeria