Back to news

May 2, 2024 | International, Land

CISA Warns of Active Exploitation of Severe GitLab Password Reset Vulnerability

A critical flaw (CVE-2023-7028) is being actively exploited, allowing account takeover by sending password reset emails to unverified addresses.

https://thehackernews.com/2024/05/cisa-warns-of-active-exploitation-of.html

On the same subject

  • Swiss seek package deal of ground-based weapons, combat aircraft

    August 29, 2019 | International, Land

    Swiss seek package deal of ground-based weapons, combat aircraft

    By: Sebastian Sprenger COLOGNE, Germany — The Swiss government plans to make the integration of combat aircraft and ground-based air defense assets a key benchmark in its planned $8 billion Air 2030 program, according to officials. Program leaders disclosed the desire for a high degree of interplay between the two competing missile-defense offers and four possible aircraft types during a news conference in the capital Bern earlier this month. The comments reveal a new front in the selection criteria for one of Europe's most prized defense acquisitions, where the air and ground portions had always existed as separate tracks. Fear of fratricide in Switzerland's small and crowded airspace is one of two key factors driving the need for close integration between ground and aerial assets, said Swiss Air Force Col. Marco Forrer. Given the country's alpine terrain and the requirement to hit targets more than 50 kilometers away and over 12 kilometers high, official are concerned about erroneously downing civilian planes, he said. “That's why BodLuv has to be integrated into the Air Force operational picture and command-and-control network,” Forrer said, referring to the German-language acronym for the ground-based program Bodengestützte Luftverteidigung. Forrer added that a high level of integration also is crucial to keeping costs down, enabling air defenders to engage targets with greater precision and — hopefully — fewer misses. Of the total Air 2030 program, $6 billion is slated for a new fleet of aircraft, while $2 billion is budgeted for ground-based defenses. In the aerial segment, the planes in play are the Airbus Eurofighter Typhoon, the Lockheed Martin F-35, Dassault's Rafale and Boeing's F-18 Super Hornet. In the ground segment, Swiss officials are left with choosing between Raytheon's Patriot and the SAMP-T system, which is made by an MBDA-Thales consortium called Eurosam. Israel's Rafael, which was also invited to bid with its David's Sling system, never responded to the invitation, presumably following pressure by the Israeli or American governments to stay out of the race. Swiss officials have complained that they never got a straight answer explaining Rafael's abstention, and the company's non-response has left them worried about the losing an element of competition in the race that could make for lower costs. “It can have a negative impact on the competitive situation,” said Christian Catrina, who oversees Air 2030 at Switzerland's defense ministry. “We will never know if so and how strongly. We would have appreciated having three contenders.” Following a similar wave of aircraft tests in Switzerland over the spring and early summer, evaluations of the two ground-based systems, namely regarding their radar sensors, began this month. First up is the Patriot system with a two-week test, which will end Aug. 30; SAMP-T is next, beginning Sept. 16. The tests will take place at an army range near Menzingen, central Switzerland, where the Swiss operated the Bloodhound weapon system until its retirement in the late 1990s. https://www.defensenews.com/global/europe/2019/08/28/swiss-seek-package-deal-of-ground-based-weapons-combat-aircraft/

  • Rafael to demo lighter Trophy protection system on Bradley Fighting Vehicle

    June 12, 2018 | International, Land

    Rafael to demo lighter Trophy protection system on Bradley Fighting Vehicle

    PARIS — Rafael is rapidly driving toward a demonstration of a lighter version of its Trophy active protection system, or APS, on a Bradley Fighting Vehicle this summer as the U.S. Army continues to assess APS systems on its combat vehicles, according to Rafael's head of its land maneuver systems directorate. The Israeli company has already been chosen to field Trophy on four brigade sets of Abrams tanks, and the U.S. Army continues to analyze two other systems on Bradley and on the Stryker combat vehicle. The Army is qualifying Israeli company IMI System's Iron Fist on Bradley and the Virginia-based Artis' Iron Curtain for Stryker. The characterization efforts for both Bradley and Stryker systems are delayed by roughly six to eight months depending on the system. Should one or both of them have insufficient performance or maturity, the Army could choose to adapt another system under evaluation to that platform; or the service could assess another nondevelopmental APS system to fit that same role; or furthermore, it could make a decision to move the system from engineering development activity under a science and technology development effort as part of the Vehicle Protection Systems program of record, according to Army spokeswoman Ashley Givens. There's also fiscal 2018 funding that will be used to evaluate a fourth nondevelopmental APS system via an installation and characterization activity to be identified after a preliminary evaluation phase that will occur late this year, applying lessons learned from efforts to date, Givens added. So Rafael sees a lighter version of Trophy as a promising candidate for other U.S. combat vehicles, which has advantages such as a large amount commonality with Trophy on Abrams, Rafael's Michael L. told Defense News in a June 11 interview at the French defense conference Eurosatory. Michael's last name has been withheld for security reasons. And the timing seems right, according Michael, as the Army will move toward decisions on APS systems for its combat vehicles at some time this year. Rafael has been conducting extensive testing of its lighter and smaller Trophy system, and the company is inviting the U.S. military to attend a major test event in August in Israel to witness the capability on a Bradley, which is the combat vehicle considered the most difficult on which to integrate a system because of the current variant's power limitations. The company would also be capable of integrating the system onto a Stryker, but it has decided — along with its U.S. partner DRS — to focus on Bradley for the time being, Michael said. While the current Trophy system would be too heavy, coming in at 1.8 tons as a full system, the lighter version will weigh just shy of half that, while still retaining “the same method of operations, the same logic, the same interface,” Michael said. Rafael sees the solution not as a simple one, but a high-end one, which it believes would be needed on a platform like Bradley. Israel and other countries are also calling for a lighter APS system that would work on infantry fighting vehicles, and so Rafael sees “a large business opportunity,” according to Michael. “In August we are going to surprise a lot of people who weren't sure,” Michael said, “because when you say shrinking, it's not just making it smaller. You need to make sure that nothing was lost in the process ... we already know that nothing has been lost, but we are testing it to make sure that everything is in order, and I think we have a great solution.” Rafael is also developing and testing a 30mm weapon station outfitted with Trophy as an all-in-one system, according to Michael. The turret can be purchased with or without the Trophy system. One customer ― not Israel or the U.S. ― is buying more than a hundred 30mm weapons stations. The company will complete development of the turret in September and will then begin production for the country in January 2019, Michael said. While the country has yet to commit to adding Trophy as part of a single system, it wanted to prove the system with Trophy. Rafael is eyeing what happens with the ongoing assessment by the U.S. Army to upgun its Strykers with a 30mm cannon. The assessment of the current configuration is expected to wrap up in the summer. Michael said the company has spoke with the Stryker program office in the U.S. to understand what the soldier wants from a 30mm cannon with the intention to fine-tune an offering should the Army decide to assess other 30mm options in order to outfit the rest of its Stryker fleet. And to sweeten the deal, the 30mm cannon would come with an APS system already integrated into the turret, according to Michael. https://www.defensenews.com/digital-show-dailies/eurosatory/2018/06/11/rafael-to-demo-lighter-trophy-protection-system-on-bradley-fighting-vehicle/

  • Contract Awards by US Department of Defense - March 12, 2019

    March 15, 2019 | International, Aerospace, Naval, Land, C4ISR, Security, Other Defence

    Contract Awards by US Department of Defense - March 12, 2019

    NAVY Northrop Grumman Systems Corp. - Marine Systems, Sunnyvale, California, is awarded a $273,053,534 cost-plus incentive-fee, cost-plus-fixed-fee, firm-fixed-price contract for technical engineering services, design and development engineering, component and full scale test and evaluation engineering, and tactical underwater launcher hardware production to support the development and production of the Common Missile Compartment. Work will be performed in Sunnyvale, California (55 percent); Ridgecrest, California (20 percent); Cape Canaveral, Florida (10 percent); Bangor, Washington (5 percent); Kings Bay, Georgia (5 percent); Barrow-In-Furness, England (2 percent); New London, Connecticut (1 percent); Quonset Point, Rhode Island (1 percent); and Arlington, Virginia (1 percent), and is expected to be completed by March 31, 2024. Fiscal 2019 shipbuilding and conversion (Navy) funding in the amount of $39,631,234 will be obligated on this award. Fiscal 2019 United Kingdom Common funding in the amount of $24,369,442 will be obligated on this award. No funds will expire at the end of the current fiscal year. This contract was not competitively solicited pursuant to 10 U.S. Code. Strategic Systems Programs, Washington, District of Columbia, is the contracting activity (N00030-19-C-0015). Lockheed Martin Corp. Missile and Fire Control, Orlando, Florida, is awarded an $84,108,050 cost-plus-fixed-fee, indefinite-delivery/indefinite-quantity contract to perform design and development studies, technology demonstrations and engineering services for rapid technology development for the Joint Air-to-Surface Standoff Missile, Long Range Anti-Ship Missile, Joint Air-to-Ground Missile and Hellfire baseline weapon systems. Work will be performed in Orlando, Florida, and is expected to be completed in March 2024. Fiscal 2018 research, development, test and evaluation (Navy) funds in the amount of $4,584,507 will be obligated at the time of award, none of which will expire at the end of the current fiscal year. This contract was not competitively procured pursuant to 10 U.S. Code 2304(c)(1). The Naval Air Warfare Center Weapons Division, China Lake, California, is the contracting activity (N68936-19-D-0020). Smartronix Inc., Hollywood, Maryland, is awarded a $72,374,593 cost-plus-fixed-fee, cost reimbursable, indefinite-delivery/indefinite-quantity contract. This contract provides information management and information technology support services to sustain the analysis, design, development, integration, test, deployment and operations of information technology systems and services. This contract includes help desk, software engineering, financial and business application, server operations, application hosting, desktop, audiovisual and video teleconferencing support services. Work will be performed in China Lake, California (80 percent); and Point Mugu, California (20 percent), and is expected to be completed in March 2024. No funds will be obligated at the time of award. Funds will be obligated on individual orders as they are issued. This contract was competitively procured via an electronic request for proposal; six offers were received. The Naval Air Warfare Center Weapons Division, China Lake, California, is the contracting activity (N68936-19-D-0027). Ch2m Hill Inc., Englewood, Colorado, is awarded a $68,000,000 cost-plus-award-fee modification to increase the maximum dollar value of an indefinite-delivery/indefinite-quantity contract for comprehensive long-term environmental architect-engineering services on Navy and Marine Corps installations at sites in the Naval Facilities Engineering Command (NAVFAC) Atlantic area of responsibility. The work to be performed provides for architectural and engineering services to provide program management and technical environmental services in support of the Department of the Navy's Environmental Restoration Program, Munitions Response Program, and other similar programs at any Navy and Marine Corps activity in the area of responsibility covered by NAVFAC Atlantic. After award of this modification, the total cumulative contract value will be $308,000,000. Work will be performed primarily in Puerto Rico (35 percent); California (18 percent); Virginia (15 percent); Washington (12 percent), North Carolina (8 percent); Maryland (7 percent); Mississippi (3 percent); and Washington, District of Columbia (2 percent), and is expected to be completed by March 2020. No funds will be obligated at time of award; funds will be obligated on individual task orders as they are issued. Task orders will be primarily funded by environmental restoration, (Navy). The contractor was chosen using federal acquisition regulation Part 36, Architect-Engineer Services on an unrestricted basis. The Naval Facilities Engineering Command, Atlantic, Norfolk, Virginia, is the contracting activity (contract number N62470-16-D-9000). Kiewit Infrastructure West Co., Honolulu, Hawaii, is awarded a $64,993,500 firm-fixed-price contract for P-704 Sewer Lift Station and Relief Sewer Lines, Joint Base Pearl Harbor-Hickam, Hawaii. The work to be performed provides for two major components. The first component is a new wastewater pump station to replace existing pump station SY-001. The second component is a new gravity sewer main along South Avenue that replaces an existing gravity trunk sewer. A new pump station and gravity sewer line are required to accommodate the anticipated increase in wastewater flows from proposed shore activities within the existing pump station SY-001 collection area and to accommodate peak wet-weather flows with the required level of redundancy. Work will be performed in Oahu, Hawaii, and is expected to be completed by June 2021. Fiscal 2017 military construction (Navy) contract funds in the amount of $64,993,500 are obligated on this award and will not expire at the end of the current fiscal year. This contract was competitively procured via the Navy Electronic Commerce Online website, with five proposals received. The Naval Facilities Engineering Command, Hawaii, Joint Base Pearl Harbor-Hickam, Hawaii, is the contracting activity (N62478-19-C-1515). Joyce & Associates Construction Inc.,* Newport, North Carolina (N40085-19-D-8044); Olympic Enterprises Inc.,* Hubert, North Carolina (N40085-19-D-8045); Owens Construction Inc.,* Beaufort, North Carolina (N40085-19-D-8046); Pyramid Contracting LLC,* Irmo, South Carolina (N40085-19-D-8047); and TE Davis Construction Co.,* Jacksonville, North Carolina (N40085-19-D-8048), are being awarded a $40,000,000 firm-fixed-price, indefinite-delivery/indefinite-quantity, multiple award construction contract for maintenance and repair project. Work will be performed at Marine Corps Base Camp Lejeune, North Carolina, and the surrounding area. Joyce & Associates Construction Inc. is being awarded an initial task order of $498 for the head repairs at Building 1747 at Camp Lejeune, North Carolina. Work is expected to be completed by July 2019. The term of the contract is not to exceed 60 months, with an expected completion date of March 2024. Fiscal 2019 operations and maintenance, (Marine Corps) (O&M,MC) contract funds in the amount of $498 are obligated on this award and will expire at the end of fiscal 2019. Future task orders will be primarily funded by O&M,MC. This contract was competitively procured via the Navy Electronic Commerce Online website with 12 proposals received. These five contractors may compete for task orders under the terms and conditions of the awarded contract. The Naval Facilities Engineering Command, Mid-Atlantic, Norfolk, Virginia, is the contracting activity. Burns & McDonnell Engineering Co., Inc., Kansas City, Missouri, is awarded a maximum amount $20,000,000 indefinite-delivery/indefinite-quantity, architect-engineering contract for architect-engineer (AE) services for various fire protection projects at various locations in all areas under the cognizance of Naval Facilities Engineering Command (NAVFAC), Pacific. The work to be performed provides for architect-engineer fire protection services with associated multi-discipline architect-engineer support services. AE fire protection services include, but are not limited to, design and engineering services for preparation of technical reports including conducting engineering investigations and concept studies; fire protection design features including life safety analysis, building and fire code analysis, including water supply analysis at proposed project sites, etc.; design-build request for proposal documents; design-bid-build construction documents; construction estimates; operations and maintenance manuals; record drawings; shop drawing reviews and other construction submittal review; technical review of design plans and specification prepared by architecture/engineering firms and government forces; water flow testing; final acceptance testing of all types of installed fire protection systems; post construction award services; and other miscellaneous services. No task orders are being issued at this time. Work will be performed at various Navy, Marine Corps, Air Force, and other government facilities within the NAVFAC Pacific area of responsibility including but not limited to Guam and the Northern Marianas Islands (70 percent); Australia (20 percent); and Hawaii (10 percent). The term of the contract is not to exceed 60 months, with an expected completion date of March 2024. Fiscal 2017 military construction (MILCON), (planning and design) contract funds in the amount of $10,000 are obligated on this award and will not expire at the end of the current fiscal year. Future task orders will be primarily funded by MILCON. This contract was competitively procured via the Navy Electronic Commerce Online website, with eight proposals received. The Naval Facilities Engineering Command, Pacific, Joint Base Pearl Harbor-Hickam, Hawaii, is the contracting activity (N62742-19-D-0006). NCS/EML SB JV LLC,* Louisville, Kentucky, is awarded an $11,981,174 indefinite-delivery/indefinite-quantity contract for base operations support services at Naval Air Station Whiting Field and outlying areas. The work to be performed to include facility investment, pest control, other (swimming pools), grounds maintenance and landscaping, pavement clearance, utilities management, electrical, wastewater, water, base support vehicles and equipment, and other related services. The maximum dollar value including the base period and seven option years is $96,721,878. Work will be performed in Milton, Florida (67 percent); and outlying areas (33 percent), and is expected to be completed by March 2020. No funds will be obligated at time of award. Fiscal 2019 operations and maintenance (Navy); fiscal 2019 working capital funds (Navy); fiscal 2019 Defense Health Program; and fiscal 2019 family housing operation and maintenance (Navy) contract funds in the amount of $8,359,610 for recurring work will be obligated on individual task orders issued during the base period. This contract was competitively procured via the Navy Electronic Commerce Online website, with eight proposals received. The Naval Facilities Engineering Command, Southeast, Jacksonville, Florida, is the contracting activity (N69450-19-D-1740). DEFENSE SECURITY SERVICE iWorks Corp., Reston, Virginia, was awarded a $48,980,260.80 firm-fixed-price contract for the Defense Security Service (DSS) Vetting Risk Operations Center (VROC) and Consolidated Adjudications Facility (CAF) Personnel Security Support Services. The contract provides for the Personnel Security Support Services to assist in successfully executing the vetting mission for the Defense Vetting Directorate. Work will be performed at the DSS VROC office located in Hanover, Maryland; and the Department of Defense CAF office in Ft. Meade, Maryland, with an expected completion date of Feb. 4, 2024. Fiscal 2019 operations and maintenance funding in the amount of $7,310,770 are being obligated at time of award. This contract was a competitive acquisition and multiple proposals were solicited on government-wide point of entry (https://www.fbo.gov) and four proposals were received. The Defense Security Service Office of Acquisitions, Quantico, Virginia, is the contracting activity (HS0021-19-C-0001). DEFENSE LOGISTICS AGENCY Honeywell International Inc., Clearwater, Florida, has been awarded a maximum $12,788,000 firm-fixed-price contract for Inertial Navigation Systems. This was a sole-source acquisition using justification 10 U.S. Code 2304 (c)(1), as stated in Federal Acquisition Regulation 6.302-1. This is a one-year contract with one one-year option period. The option is being exercised at time of award. Location of performance is Florida, with a June 22, 2020, performance completion date. Using military service is Army. Type of appropriation is fiscal 2019 through 2020 Army working capital funds. The contracting activity is the Defense Logistics Agency Land and Maritime, Warren, Michigan (SPRDL1-19-C-0116). Honeywell International Inc., Clearwater, Florida, has been awarded a $7,724,728 firm-fixed-price contract for Inertial Navigation Kits. This is a 22-month base contract with one one-year option period. The option was exercised at time of award. This was a competitive acquisition with one response received. Location of performance is Florida, with a Jan. 2, 2021, performance completion date. Using military service is Army. Type of appropriation is fiscal 2019 defense working capital funds. The contracting activity is the Defense Logistics Agency Land and Maritime, Warren, Michigan (SPRDL1-19-C-0099). (Awarded March 8, 2019) R. B. Allen Co., Inc., North Hampton, New Hampshire, has been awarded a maximum $7,531,007 requirements contract for casualty control communication systems to include technical data, training, testing, and shipping. This was a sole-source acquisition using justification 10 U.S. Code 2304 (c)(1), as stated in Federal Acquisition Regulation 6.302-1. This is a one-year base contract with four one-year option periods. Location of performance is New Hampshire, with a March 18, 2020, performance completion date. Using military service is Navy. Type of appropriation is fiscal 2019 Navy capital improvement program funds. The contracting activity is Defense Logistics Agency Aviation, Richmond, Virginia (SPE4A8-18-D-0001). UPDATE: Globe Trailer Manufacturing Inc., Bradenton, Florida (SPE8EC-19-D-0039) has been added as an awardee to the multiple-award contract for commercial trucks and trailers, issued against solicitation SPE8EC-17-R-0008, announced April 20, 2017. ARMY ExpFederal Inc., Chicago, Illinois, was awarded an $11,254,947 firm-fixed-price contract for electrical safety assessments, repairs program, materials management and control services for U.S. Forces-Afghanistan. Bids were solicited via the internet with 12 received. Work will be performed in Bagram, Afghanistan, with an estimated completion date of March 11, 2021. Fiscal 2019 operations and maintenance, Army funds in the amount of $11,254,947 were obligated at the time of the award. U.S. Army Corps of Engineers, Huntsville, Alabama, is the contracting activity (W912DY-19-C-0008). *Small business https://dod.defense.gov/News/Contracts/Contract-View/Article/1783465/

All news