Back to news

December 3, 2024 | International, C4ISR, Security

Cisco Warns of Exploitation of Decade-Old ASA WebVPN Vulnerability

Cisco warns of active exploitation of CVE-2014-2120 in ASA WebVPN; users urged to update.

https://thehackernews.com/2024/12/cisco-warns-of-exploitation-of-decade.html

On the same subject

  • DoD IG: Military networks are exposed to ‘unnecessary’ cyber risks

    December 19, 2018 | International, C4ISR

    DoD IG: Military networks are exposed to ‘unnecessary’ cyber risks

    By: Mark Pomerleau The military services are exposing networks to “unnecessary cybersecurity risks” thanks in part to a lack of visibility over software application inventories, according to a Department of Defense Inspector General report. The IG investigated whether DoD components rationalized their software applications by identifying and eliminating any duplicative or obsolete applications. Rationalizing software applications seeks to improve enterprise IT by identifying all software applications on the network; determining if existing applications are needed, duplicative or obsolete; and determining if applications already existing within the network prior to purchasing new ones. The audit — which focused on Marine Corps, Navy and Air Force commands and divisions — found that the groups examined did not consistently perform this rationalization process. By not having visibility into software application inventories, these organizations were unable to identify the extent of existing vulnerabilities within their applications, the report found. Moreover, such a process could lead to cost savings associated with eliminating duplicative and obsolete applications. Fleet Forces Command was the only command the IG reviewed that had a process in place for eliminating duplicative or obsolete applications. The Air Force did not have a process in place to prevent duplication when purchasing new applications. The report placed blame on the DoD chief information officer for not implementing a solution for software rationalization in response to Federal Information Technology Acquisition Reform Act requirements. The IG made three recommendations for the CIO, who did not provide a response to draft recommendations: Develop an enterprisewide process for conduction software application rationalization throughout DoD; Establish guidance requiring DoD components to conduct rationalization and require DoD component CIOs to develop implementation guidance outlining responsibilities for rationalization. Such a policy should also require components on at least an annual basis to validate the accuracy of their owned and in use software applications inventory; and Conduct periodic review to ensure components are regularly validating the accuracy of their inventory and they are eliminating duplicative and obsolete applications. https://www.fifthdomain.com/dod/2018/12/18/dod-ig-military-networks-are-exposed-to-unnecessary-cyber-risks

  • Contract Awards by US Department of Defense - July 13, 2020

    July 14, 2020 | International, Aerospace, Naval, Land, C4ISR, Security

    Contract Awards by US Department of Defense - July 13, 2020

    AIR FORCE The Boeing Co., St. Louis, Missouri, has been awarded a $22,890,000,000 indefinite-delivery/indefinite-quantity contract (FA8634-20-D-2704). The first delivery order has been awarded as an undefinitized contract action with a total not-to-exceed value, including options, of $1,192,215,413. It is a cost-plus-fixed-fee, cost-plus-incentive-fee, fixed-price-incentive-fee, firm-fixed-price effort for the F-15EX system. This delivery order (FA8634-20-F-0022) provides for design, development, integration, manufacturing, test, verification, certification, delivery, sustainment and modification of F-15EX aircraft, as well as spares, support equipment, training materials, technical data and technical support. Work will be performed in St. Louis, Missouri; and at Eglin Air Force Base, Florida, and is expected to be completed Dec. 31, 2023. This award is the result of a sole-source acquisition. Fiscal 2020 research, development, test and evaluation funds in the amount of $248,224,746; and fiscal 2020 aircraft procurement funds in the amount of $53,000,000 are being obligated at the time of award. Air Force Life Cycle Management Center, Wright-Patterson AFB, Ohio, is the contracting activity. Filius Corp., Centreville, Virginia, has been awarded a $70,617,597 indefinite-delivery/indefinite-quantity, firm-fixed-price contract for the AN/TYQ-23A (V)1 Tactical Air Operations Module weapons system logistics support. The contractor will provide all labor, tools, equipment, technical data/manuals, materials, supplies, parts, original equipment manufacturer (OEM) service bulletins and services necessary to perform contractor logistics support on TYQ-23A (V)1 in accordance with OEM standards (commercial standards if third party is performing service/repair), including software/firmware upgrades. This support will also include emergency and preventative maintenance for any future technologies designed to be implemented in the TYQ-23A. Work will be performed in Centreville, Virginia, and is expected to be completed July 2025. This award is the result of a competitive acquisition with five offers received. Fiscal 2020 operations and maintenance funds in the amount of $2,300,000 are being obligated at the time of award. Air Force Life Cycle Management Center, Hill Air Force Base, Utah, is the contracting activity (FA8217-20-D-0005). Renco Corp., Manchester, Massachusetts, has been awarded a not-to-exceed $22,400,000 undefinitized contract action for capacity expansion of Nitrile beutadine rubber (NBR) gloves production for the Department of Health and Human Services in care of the Joint Acquisition Task Force. This contract provides for the procurement of raw NBR materials, dipping lines, storage tanks, storage equipment, roofing repairs, lighting, loading docks, water treatment, solar roofs and a remote facility to be determined at a later date in the south central part of the U.S. in order to bring an industrial base and to replenish the strategic national stockpile of Nitrile produced rubber gloves back to the U.S. Work will be performed in Colebrook, New Hampshire, and is expected to be completed July 14, 2021. This award is the result of a sole-source acquisition. Fiscal 2020 other procurement funds in the amount of $22,400,000 are being obligated at the time of award. Air Force Life Cycle Management Center, Robins Air Force Base, Georgia, is the contracting activity (FA8527-20-C-0005). NAVY Blue Rock Structures Inc.,* Pollocksville, North Carolina (N40085-16-D-6300); Daniels & Daniels Construction Co. Inc.,* Goldsboro, North Carolina (N40085-16-D-6301); Joyce & Associates Construction Inc.,* Newport, North Carolina (N40085-16-D-6302); Military & Federal Construction Co. Inc.,* Jacksonville, North Carolina (N40085-16-D-6303); Quadrant Construction Inc.,* Jacksonville, North Carolina (N40085-16-D-6304); and TE Davis Construction Co.,* Jacksonville, North Carolina (N40085-16-D-6305), are awarded a $90,000,000 firm-fixed-price modification to increase the maximum dollar value of indefinite-delivery/indefinite-quantity, multiple award construction contracts for general construction services within the Marine Corps Installations East area of responsibility. After award of this modification, the total maximum dollar value for all six contracts combined will be $339,000,000. Work will be performed at Navy and Marine Corps installations at various locations including, but not limited to, North Carolina (90%); Georgia (3%); South Carolina (3%); Virginia (3%); and other areas of the U.S. (1%). The work to be performed provides for general construction services including, but not limited to, new construction, demolition, repair, alteration and renovation (total/partial/interior/exterior) of buildings, systems and infrastructure, which may include civil, structural, mechanical, electrical and communication systems; installation of new or extensions to existing high voltage electrical distribution systems; extensions to the existing high pressure steam distribution systems, potable water distribution systems and sanitary sewer systems; additional storm water control systems; painting; removal of asbestos materials and lead paint; and incidental related work. Work is expected to be completed by December 2020. No funds will be obligated at the time of award; funds will be obligated on individual task orders as they are issued. Future task orders will be primarily funded by operations and maintenance (Marine Corps); and military construction funds (Marine Corps). The Naval Facilities Engineering Command Mid-Atlantic, Norfolk, Virginia, is the contracting activity. Huntington Ingalls Inc., Newport News, Virginia, is awarded a $35,346,618 cost-plus-fixed-fee, firm-fixed-price modification to a previously awarded contract (N00024-16-C-4316) to continue performance of the repair, maintenance, upgrades and modernization efforts on the USS Helena (SSN 725) dry-docking selected restricted availability (DSRA). Work will be performed in Newport News, Virginia. The contracted requirements include advance and new work efforts necessary to repair, and maintain full unrestricted operation of the submarine, as well as upgrades and modernization efforts required to ensure the submarine is operating at full technical capacity as defined in the availability work package during the Chief of Naval Operations scheduled availability. Work is expected to be completed by October 2020. Fiscal 2020 operations and maintenance (Navy) funding in the amount of $35,346,618 will be obligated at time of award and will expire at the end of the current fiscal year. In accordance with 10 U.S. Code 2304(c)(1), this contract was not competitively procure; only one responsible source and no other supplies or services will satisfy agency requirement. The Supervisor of Shipbuilding, Conversion and Repair, USN, Newport News, Virginia, is the contracting activity. L3 Technologies Inc., Camden, New Jersey, is awarded a $34,999,948 fixed-price-incentive-firm-target contract for the detail design and fabrication of a prototype Medium Unmanned Surface Vehicle (MUSV). This contract includes options for up to eight additional MUSVs, logistics packages, engineering support, technical data, and other direct costs, which, if exercised, will bring the cumulative value of this contract to $281,435,446. Work will be performed in Morgan City, Louisiana (72.7%); Arlington, Virginia (9.8%); Jeanerette, Louisiana (8.1%); New Orleans, Louisiana (6.6%); Worthington, Ohio (1.7%); Lafayette, Louisiana (0.9 %); and Gautier, Mississippi (0.2%), and is expected to be completed by December 2022. If all options are exercised, work will continue through June 2027. Fiscal 2019 and 2020 research, development, test and evaluation funding in the amount of $34,999,948 will be obligated at the time of award, and $29,779,038 will expire at the end of the current fiscal year. This contract was competitively procured via Federal Business Opportunities (now beta.SAM.gov), and five offers were received. The Naval Sea Systems Command, Washington, D.C., is the contracting activity (N00024-20-C-6312). Northrop Grumman Systems Corp., Linthicum, Maryland, is awarded an $11,300,000 not-to-exceed, cost-plus fixed-fee contract for the procurement of transitional development and sustaining engineering services for the Ground/Air Task-Oriented Radar (G/ATOR), to include software support activity transition, low/slow/small capability development and ground weapons locating radar improvements. The G/ATOR program is managed within the portfolio of Program Executive Officer Land Systems, Quantico, Virginia. Work will be performed in Linthicum, Maryland, and is expected to be completed by July 2021. Fiscal 2020 research, development, test and evaluation (Marine Corps) funds in the amount of $2,217,296; and fiscal 2020 operations and maintenance (Marine Corps) funds in the amount of $3,000,000 will be obligated at the time of award. Funds will not expire at the end of the current fiscal year. This contract was not competitively procured and was prepared in accordance with Federal Acquisition Regulation 6.302-1 and 10 U.S. Code 2304(c)(1). The Marine Corps Systems Command, Quantico, Virginia, is the contracting activity. General Dynamics Electric Boat, Groton, Connecticut, is awarded an $8,127,069 modification under previously awarded contract N00024-16-C-2111 to perform alterations during the USS South Dakota (SSN 790) post-delivery work period. Work will be performed in Groton, Connecticut. General Dynamics Electric Boat will perform planning and execution efforts on SSN 790, USS South Dakota. Work is expected to be completed by December 2020. No funding will be obligated at time of award. The Supervisor of Shipbuilding Conversion and Repair, Groton, Connecticut, is the contracting activity. General Dynamics Electric Boat, Groton, Connecticut, is awarded a $7,829,633 modification under previously awarded contract N00024-16-C-2111 to perform alterations during the USS South Dakota (SSN 790) post-delivery work period. Work will be performed in Groton, Connecticut. General Dynamics Electric Boat will perform planning and execution efforts on SSN 790, USS South Dakota. Work is expected to be completed by December 2020. No funding will be obligated at time of award. The Supervisor of Shipbuilding Conversion and Repair, Groton, Connecticut, is the contracting activity. General Dynamics Electric Boat Corp., Groton, Connecticut, is awarded a $7,765,664 cost-plus-fixed-fee modification to a previously awarded contract (N00024-09-C-2104) for planning and execution of USS Delaware (SSN 791) post delivery work period (PDWP). Work will be performed in Groton, Connecticut. Electric Boat Corp. will perform planning and execution efforts, including long lead time material procurement, in preparation to accomplish the maintenance, repair, alterations, testing, and other work on USS Delaware (SSN 791) during its scheduled PDWP. Work is expected to be completed by October 2020. Fiscal 2020 shipbuilding and conversion (Navy) funding in the amount of $7,765,664 will be obligated at the time of award and will not expire at the end of the current fiscal year. The Supervisor of Shipbuilding Conversion and Repair, Groton, Connecticut, is the contracting activity. DEFENSE LOGISTICS AGENCY Hikma Pharmaceuticals USA Inc., Eatontown, New Jersey, has been awarded a maximum $42,907,336 fixed-price with economic-price-adjustment, indefinite-delivery/indefinite-quantity contract for various pharmaceutical products. This was a competitive acquisition with one response received. This is a one-year base contract with nine one-year option periods. Location of performance is New Jersey, with a July 12, 2021, ordering period end date. Using customers are Army, Navy, Air Force, Marine Corps and federal civilian agencies. Type of appropriation is fiscal 2020 through 2021 Warstopper funds. The contracting activity is the Defense Logistics Agency Troop Support, Philadelphia, Pennsylvania (SPE2D0-20-D-0006). ARMY Mathy Construction Co., Onalaska, Wisconsin, was awarded an $8,870,763 modification (P00002) to contract W911SA-19-D-2018 for asphalt paving at Fort McCoy. Work will be performed at Fort McCoy, Wisconsin, with an estimated completion date of July 14, 2022. Bids were solicited via the internet with one received. The U.S. Army 419th Contracting Support Brigade, Fort McCoy, Wisconsin, is the contracting activity. Northrop Grumman Systems Corp., Herndon, Virginia, was awarded a $7,845,596 hybrid (cost-no-fee, firm-fixed-price) contract to provide U.S. Forces Korea with information technology, architecture and engineering, command and control networks and associated systems support services. Bids were solicited via the internet with five received. Work will be performed in Pyongtaek, South Korea, with an estimated completion date of July 31, 2025. The 411th Contracting Support Brigade, Camp Red Cloud, South Korea, is the contracting activity (W91QVN-20-F-0440). *Small Business https://www.defense.gov/Newsroom/Contracts/Contract/Article/2272447/source/GovDelivery/

  • Five European states sign letter of intent to buy Mistral air defence systems - sources

    June 19, 2023 | International, Land

    Five European states sign letter of intent to buy Mistral air defence systems - sources

    France, Belgium, Cyprus, Estonia and Hungary signed a letter of intent for the joint purchase of the French Mistral air defence systems, two sources aware of the matter said on Monday.

All news