📊Executive Summary

Recent research has uncovered significant vulnerabilities in SIM cards that could allow remote attacks on connected devices, including smartphones, IoT modules, and EV chargers. The findings, presented at the 2026 USENIX WOOT Conference, reveal that compromised SIM cards can issue commands to devices, potentially leading to unauthorized control, data theft, and network downgrades. This highlights the need for enhanced security measures in the supply chain, particularly in the manufacturing and software update processes. The implications for procurement teams are critical, as they must ensure that devices sourced from manufacturers are secure and resilient against such vulnerabilities....