Remotely Exploding Pagers

It seems they all exploded simultaneously, which means they were triggered.

Were they each tampered with physically, or did someone figure out how to trigger a thermal runaway remotely? Malicious code update, or natural vulnerability?

I have no idea, but I expect we will all learn over the next few days.