Connect with us

E-Business

Kaspersky Discovers Vulnerability in Qualcomm Snapdragon Chips that can Lead to Data Loss & Device Compromise

Published

on

Kindly share this post

Kaspersky ICS CERT discovered a hardware-level vulnerability affecting Qualcomm chipsets that are widely used in a range of consumer and industrial devices, including smartphones and tablets, car components, IoT devices and more.

The vulnerability resides in the BootROM – firmware embedded at the hardware level. Attackers could potentially get access to any data stored on the device or device sensors like camera and microphone, implement complicated attack scenarios and in some circumstances get full control of the device. The results of the research were presented at Black Hat Asia 2026.

The vulnerability affects Qualcomm MDM9x07, MDM9x45, MDM9x65, MSM8909, MSM8916, MSM8952 and SDX50 series and was reported to Qualcomm in March 2025. Qualcomm formally acknowledged the vulnerability in April 2025. It has been assigned a CVE-2026-25262. Other Qualcomm-based chips may be affected as well.

Kaspersky researchers explored the Sahara protocol, a low-level communication system used when a Qualcomm chip enters Emergency Download Mode (EDL) – a special recovery mode designed for repairing or restoring smartphones or other devices. Sahara acts as the first step that allows a computer to connect to the device and load software before the operating system on the device starts.

Kaspersky demonstrated that a security flaw in this process could allow an attacker with physical access to the target device to bypass key security protections in the chip, compromise the secure boot chain and, in some cases, deploy malicious applications and backdoors to the chip’s Application Processor, thus fully compromising the entire device.

For example, in cases when the target device is a smartphone or a tablet, the attacker can potentially get access to entered user passwords, and subsequently this opens further access to multiple types of sensitive user data, such as files, contacts, location, access to the devices’ camera and microphone, etc.

A potential attacker only needs a few minutes of physical access to a device to compromise it. Therefore, if a smartphone has been sent for repair or left unattended for a short time, one can no longer be sure it is not infected. Researchers warn that the threat extends beyond end-user scenarios to include potential compromise during the supply chain phase.

“Vulnerabilities like this may allow attackers to deploy malware that is difficult to detect and remove. In practice, this could enable covert data collection or influence device behaviour over extended periods of time.

“While a reboot might seem like an effective way to remove such malware, it cannot always be relied upon: compromised systems may simulate a reboot without actually resetting. In such cases, only a complete loss of power – including battery depletion – guarantees a clean restart,” comments Sergey Anufrienko, security expert at Kaspersky ICS CERT.

Kaspersky advises organisations and individual users to exercise strict physical security control over devices including at the supply, maintenance and decommissioning phases. A reboot of the device by cutting off the power supply to the affected chip (if available) or full battery discharge may help to get rid of the malware if it was installed.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Identy.io, US Firm Eyes 1Bn Biometric Verification Transactions in Nigeria

Published

on

Kindly share this post

Identy.io, a United States-based cybersecurity and mobile biometric authentication company, has announced plans to process one billion biometric identity verification transactions in Nigeria within the next few years as digital banking adoption continues to expand across the country.

Identy.io, US Firm Eyes 1Bn Biometric Verification Transactions in Nigeria

The company said increasing demand for secure digital identity systems within the banking, telecommunications, and public sectors is creating fresh opportunities for biometric authentication solutions, especially as financial institutions strengthen compliance and anti-fraud measures.

Speaking at an executive roundtable on mobile biometric innovation in Lagos, Jesus Aragon, chief executive officer, Identy.io, said Nigeria’s fast-growing digital financial services sector requires more reliable and scalable identity verification technology to support customer onboarding and transaction security.

He explained that the company’s mobile biometric solution enables users to verify their identities directly from their smartphones without depending on physical scanners, external devices, or centralized processing infrastructure.

The technology supports fingerprint and facial verification while functioning effectively in areas with limited internet connectivity.

According to Aragon, the platform is designed to integrate with Nigeria’s Bank Verification Number (BVN) system and the Nigeria Inter-Bank Settlement System (NIBSS), allowing financial institutions to carry out secure remote identity authentication.

He stated that the company’s technology includes liveness detection and deepfake identification features capable of detecting fake fingerprints, manipulated images, masks, and other fraudulent identity attempts during digital onboarding processes.

The Identy.io boss added that the company’s offline verification capability distinguishes it from several existing solutions in the market, noting that biometric authentication can be completed entirely on users’ mobile devices without constant internet access.

He further disclosed that biometric information captured during authentication remains on the user’s device instead of being transferred to external servers or centralized databases, reducing exposure to data breaches and cyberattacks.

Industry stakeholders at the roundtable also discussed the increasing pressure on Nigerian banks to improve customer verification processes following stricter regulatory directives by the Central Bank of Nigeria on Know Your Customer (KYC) compliance and fraud prevention.

Participants noted that agency banking operations in rural and low-connectivity locations continue to face security and onboarding challenges, creating demand for stronger and more flexible authentication systems.

Aragon maintained that biometric authentication could significantly reduce fraud associated with passwords and one-time passwords (OTPs), stressing that biometrics provide stronger identity assurance for financial transactions.

The company also confirmed that it has expanded its footprint across Africa, Latin America, and the United States, with operational presence already established in Nigeria and Kenya.

Aragon expressed confidence that Nigeria’s banking and telecom industries would generate massive biometric verification volumes in the coming years as financial inclusion and digital payment systems continue to deepen nationwide.


Kindly share this post
Continue Reading

E-Business

TD Africa, HPE Drive Conversations on the Future of Intelligent Networking

Published

on

Kindly share this post

TD Africa, in collaboration with Hewlett Packard Enterprise (HPE) Operated by Selectium, hosted a high-level partner engagement event on May 14, 2026, focused on emerging trends shaping the future of enterprise networking and infrastructure transformation.

TD Africa, HPE Drive Conversations on the Future of Intelligent Networking

TD Africa

The engagement brought together key partners to explore how organisations can build smarter, faster, and more secure network infrastructures capable of supporting today’s rapidly evolving digital economy. Central to the discussions was the growing relevance of WiFi 7 and the shift from traditional networking models to intelligent, AI-driven infrastructure ecosystems.

As businesses continue to accelerate digital transformation, conversations at the event centred on a critical question: Is your infrastructure ready for the speed of transformation? From edge-to-cloud connectivity and IoT integration to AI-enabled networking and advanced security frameworks, the session highlighted the increasing demand for agile, scalable, and resilient enterprise solutions.

Speaking at the event, Dr. Ifee Kojo, Country Manager, HPE Operated by Selectium, highlighted HPE’s commitment to helping organisations modernise their infrastructure and navigate the future of connectivity. “HPE is driving transformation across the entire technology ecosystem, from the data centre to the edge, from IoT to AI-powered connectivity.

“Our focus is on helping businesses strengthen security, improve scalability, and build intelligent infrastructures that support innovation and growth.

“Through our strong partner TD Africa, we can extend these solutions more effectively into the market, ensuring organisations have access to the right technologies needed to compete and thrive in a rapidly evolving digital world,” she said.

Also speaking, Chioma Chimere, Coordinating Managing Director at TD Africa, emphasised the importance of future-ready networking in enabling business resilience and long-term digital growth. “Networking today is no longer just about connectivity; it has become the backbone of enterprise transformation.

“As organisations embrace AI, cloud environments, remote operations, and data-driven systems, the need for secure, intelligent, and scalable infrastructure becomes even more critical.

“TD Africa is committed to ensuring our partners are equipped with the right technologies, insights, and support needed to navigate this shift successfully.

“Our collaboration with HPE reflects our shared commitment to helping businesses modernise confidently and prepare for the future of digital innovation,” she stated.

Through strategic collaborations with global Original Equipment Manufacturers (OEMs) like HPE, TD Africa continues to strengthen its position as a key distributor of enterprise and networking solutions across Africa, enabling partners and organisations to access cutting-edge technologies backed by technical expertise, market reach, and ecosystem support.


Kindly share this post
Continue Reading

E-Business

Jumia Nigeria Records Strong Q1 2026 Growth as Technology-Led Strategy Drives Market Expansion

Published

on

Kindly share this post

Jumia has announced strong first-quarter 2026 performance results, with Nigeria emerging as one of the company’s standout growth markets across Africa, reinforcing the country’s position as a critical driver of the company’s long-term expansion strategy.

According to the company’s Q1 2026 financial results released May 7th, 2026, Nigeria recorded a 42% year-on-year increase in physical goods Gross Merchandise Value (GMV), making it one of Jumia’s strongest-performing markets during the period.

Commenting on the performance, Temidayo Ojo, CEO of Jumia Nigeria, said, “Nigeria continues to demonstrate the strength and resilience of its digital commerce ecosystem. The growth we recorded in Q1 reflects increasing consumer confidence, stronger engagement across our platform, and our continued investment in technology, logistics, and customer experience.”

“We are seeing more Nigerians embrace e-commerce not just for convenience, but as a trusted part of everyday life. Our focus remains on building a platform that is more accessible, more reliable, and more relevant to the evolving needs of Nigerian consumers and sellers,” Ojo further mentioned.

The company attributed its broader growth trajectory to disciplined execution, operational efficiency, and increased deployment of technology and AI-driven systems across its operations.

According to the report, Jumia leveraged artificial intelligence and automation across operations, finance, customer support, cybersecurity, seller management, logistics, and technology teams to improve service quality while reducing operational costs company-wide.

The company also noted that technology and content expenses declined year-on-year due to ongoing headcount optimisation and savings from renegotiated technology contracts, while operational leverage continued to improve. They further highlighted increased use of AI tools among its technology teams, alongside automation in call centres and operational systems, as part of efforts to scale sustainably while improving efficiency across African markets.

Across the platform, Jumia reported significant gains in customer retention and marketplace engagement. Quarterly Active Customers reached 2.5 million, while physical goods orders climbed to 5.9 million in Q1 2026.

The company also expanded usage beyond major urban centres, with 62% of total orders now coming from secondary cities and upcountry regions, emphasising the growing reach of digital commerce across Africa.

Despite global economic pressures, including rising memory chip and CPU prices and supply chain disruptions linked to ongoing Middle East conflicts, the company reaffirmed its path toward profitability. Jumia stated that it remains on track to achieve Adjusted EBITDA breakeven and positive cash flow in Q4 2026, with full-year profitability targeted for 2027.


Kindly share this post
Continue Reading

Trending