Connect with us

Infotech

NCC-CSIRT urges firmware update after Lenovo found vulnerabilities in own products

Published

on

Equipment manufacturer, Lenovo, has disclosed several vendor vulnerabilities in some of its products, which it said could lead to information disclosure, privilege escalation, and denial of service.

The vulnerabilities primarily affect Lenovo Products (Desktop, Desktop-All in One, Hyperscale, Lenovo Notebook, Smart Office, Storage, ThinkAgile, ThinkPad, ThinkServer, ThinkStation, and ThinkSystem).

The Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT), in its recent advisory, rated the probability of the vulnerability as high with an equally high damage potential. It, therefore, urged users of affected products to update their firmware.

The advisory cited the Lenovo report, first published in the second week of this month, indicating that the vulnerabilities are caused by flaws in the System Management Interrupt (SMI) Set BIOS Password SMI Handler, other systems used to configure platform settings over Windows Management Instrumentation (WMI), and a buffer overflow flaw in WMI SMI Handler.

Successful exploitation of the vulnerabilities could allow an authenticated local attacker to bypass security restrictions, gain elevated privileges and execute arbitrary code on the targeted system. The attacker could also send a specially crafted request to the targeted user to gain sensitive information, which could result in unauthorized Information disclosure, privilege escalation and denial of service on the targeted system.

According to NCC-CSIRT, the solution to addressing the vulnerabilities is for users to update their system firmware to the newer version(s) indicated for their product model.

The CSIRT is the telecom sector’s cyber security incidence centre set up by the NCC to focus on incidents in the telecom sector and as they may affect telecom consumers and citizens at large. The CSIRT also works collaboratively with the Nigeria Computer Emergency Response Team (ngCERT), established by the Federal Government to reduce the volume of future computer risk incidents by preparing, protecting, and securing Nigerian cyberspace to forestall attacks, and problems or related events.

Infotech

May Day: Glo salutes Nigerian workers

Published

on

Digital telecommuni cations solutions provider, Globacom, has saluted Nigerian workers as the country observes this year’s edition of the International Workers’ Day. The company enjoined them to rededicate themselves to excellence so as to take Nigeria to the next level.

In a solidarity message released on Tuesday, Globacom lauded the resilient spirit of workers in spite of present challenges. It urged them to use the opportunity of the Workers’ Day to reflect on how their contributions can build a better and more vibrant society.

“We salute Nigerian workers on this day and commend them for the hard work, commitment, resourcefulness and industry which are essential for the growth of the economy of any nation,” Globacom said, and urged them not to rest on their oars.

The company noted that the story of Nigeria cannot be complete without the huge contributions of workers, both in the public and private sectors.

The International Labour Day is observed annually on May 1 to recognise the contributions of workers all over the world. It is also used to promote a fairer and more sustainable future for all by advocating for workers’ rights.

Continue Reading

Infotech

Abaranje fire: Company sues for calm, assures victims of healthcare support

Published

on

By our reporter

Carville Integrated Ventures Limited, a leading telecoms facility management services provider, has appealed for calm following the recent fire incident at Abaranje Base Station.

The company manages base stations on behalf of Airtel Nigeria.

In a statement, the Management of Carville noted that the incident occurred during maintenance operations on a leaking part of a diesel tank, resulting in injuries to some individuals from the local community who forcefully gained unauthorised access into the facility hosting the base station during the maintenance work.

The company however sympathised with the victims while promising to provide healthcare support to them.

“The management of Carville Integrated Ventures, extends her condolences to the affected individuals and their families, stating, ‘Our hearts go out to those injured in the unfortunate incident. We are committed to providing support and assistance during their recovery process.’

“We stand by our commitment to the communities we serve, and we will continue to prioritize their welfare in all our operations.”

“Furthermore, Carville appeals to community leaders and members to cooperate with the company in implementing safety measures to prevent similar incidents in the future.”

“Safety is our top priority,” the management affirmed. “We urge everyone to adhere to safety protocols and guidelines to ensure the well-being of all.”

“Carville is working closely with local authorities and regulatory bodies to conduct a thorough investigation into the incident and implement necessary measures to prevent recurrence,” the statement read.

Meanwhile, Airtel Nigeria has also in a statement sympathised with the victims of the fire incident.

Continue Reading

Infotech

Digital identity: FG, Bill Gates partner to harmonise database

Published

on

By our reporter

The Federal Government and Microsoft Founder and Philanthropist, Mr. Bill Gates are in talks to develop a system that will help Nigeria harmonise her identity system database.

The Microsoft Founder made this known when he met with President Tinubu on the sidelines of the World Economic Forum Special Meeting in Riyadh, Saudi Arabia, on Sunday.

According to Gates, “We are working with Mr. Wale Edun, the Coordinating Minister of the Economy and Minister of Finance, on digitisation. Before you came into office, there were a few things attempted in identity management. But they have been very scattered. There have been multiple identification systems.

“Now, there is a plan to take that technology called MOSIP and use it for this identification platform so that people can get digital benefits. We are providing support for that, and we can provide more support.

“With MOSIP ID, there is potential application in all government payment programmes. It helps with payment efficiency and bank accounts, and eventually, when everyone is using that, it makes tax collection easier. That benefit will take a few years. However, there will be more bank accounts, more financial inclusion, and effective government payment programmes,” the Former Chief Executive Officer of Microsoft said.

Mr. Gates said Nigeria has the capacity to manage this system and related-technological systems as the nation brims with talented youths.

“The last time I went to the Microsoft office in Lagos, I saw the amazing work that they were doing and how they were growing their operations. So, you have a lot of Nigerian talents to manage these systems,” he said.

Responding, President Tinubu noted that his administration is investing in technology that is tailored towards ensuring transparency and accountability in government and accelerating public-sector performance and service delivery to the Nigerian people.

Emphasising his unwavering commitment to deliver reliable technology that will support a national consumer credit system and many other critical new government interventions for all Nigerians, the President said resistance is often expected when efforts are made to strengthen systems and forestall malfeasance.

“Technology is the enemy of fraud, corruption, and irregularity. We have been working hard on improving technology.”

“There is always the initial resistance. Corruption, self-interest, and fraudulent activity will always be an enemy, but when you bend that curve, you will receive the benefit. The nation will receive the benefit,” the President said.

The President also stated that he is proud of Nigeria’s youths noting that they encourage him to continue to press his reform efforts forward for their future prosperity.

Continue Reading

Trending