Back to news

December 3, 2024 | International, C4ISR, Security

Cisco Warns of Exploitation of Decade-Old ASA WebVPN Vulnerability

Cisco warns of active exploitation of CVE-2014-2120 in ASA WebVPN; users urged to update.

https://thehackernews.com/2024/12/cisco-warns-of-exploitation-of-decade.html

On the same subject

  • In a COVID-19 world, system integration is the best approach

    October 30, 2020 | International, C4ISR

    In a COVID-19 world, system integration is the best approach

    Lt. Gen. David Mann (ret.) and Maj. Gen. Francis Mahon (ret.) As COVID-19 is adding “social distancing” and “PPE” to our everyday lexicon and making handshakes a thing of the past, Project Convergence's experimentation with artificial intelligence and integration is moving the U.S. Army closer to the realization that “any sensor, any shooter — or any sensor, best shooter” applies to more than solely the air and missile defense community. Project Convergence is validating the path to success in future combat operations by integrating capabilities of many systems and not solely hanging our hopes on a new, best artillery or aviation or maneuver system. Concurrently, it is validating the need for the Army Integrated Air and Missile Defense system, or AIAMD. “See first, understand first, act first, and finish decisively” was the mantra of Army transformation in the early 2000s, and here we are, 20 years into the 21st century, with AIAMD modernization efforts on the cusp of achieving the first two elements of that axiom — which enables the last two. AIAMD's development has not been easy, but it is essential, as our adversaries have not taken a tactical pause. North Korea is now a nuclear state with intercontinental ballistic missiles and, as recently noted on Oct. 10, other missile initiatives underway. China is creating barrier islands, improving its air and missile forces, and building a carrier fleet. Russia has optimized Syria and Crimea as proving grounds for its capabilities and forces while regularly probing NATO and North American airspace. Iran has fired ballistic missiles against undefended U.S. bases, demonstrated technical and tactical prowess by executing an integrated and complex armed unmanned aerial system and cruise missile attack against Saudi Arabia, and provided nonstate actors an expanded poor man's air force. Cyber, too, is becoming “mainstream” among our adversaries, and two of our near peers are developing hypersonic weapons, as witnessed in Russia's recent Zircon cruise missile test. As the U.S. Army, and the military at large, look to the future, all acknowledge integrating systems achieves a synergistic effect from our limited number of sensors, weapon systems and munitions. Integration closes gaps and seams, and enables the timely application of fires while reducing the cost-per-intercept dilemma. Closed architectures are a thing of the past, as are stovepiped systems. We must leverage each other's data and information and apply the best available weapon to counter threat activities or inflict maximum damage upon an adversary. If the Army's Lower Tier Air and Missile Defense Sensor can provide an accurate launch point for a ballistic missile, shouldn't the Army's Precision Strike Munition or other long-range fires capability leverage this data in real time for an offensive strike? If an F-35 fighter jet detects aerial threats it cannot counter, shouldn't it pass this data via a joint architecture so the joint family of systems can defeat those threats? Project Convergence is endeavoring to expand integration and advance operating concepts to leverage all possible capabilities. It is a logical extension of a key AIAMD modernization effort — the Army's IAMD Battle Command System, or IBCS — which demonstrated impressive capabilities during a recent limited-user test. Patriot batteries executed near-simultaneous engagements against ballistic missiles and low-altitude cruise missiles, while using only Sentinel targeting data provided to IBCS. Multiple capabilities operating as an integrated system — leveraging one element's information and another's lethality to defeat a complex and integrated attack — represents true integration. The Missile Defense Agency's integration efforts with the Patriot and the Terminal High Altitude Area Defense systems, and its recent successful flight test, also demonstrate the power of an integrated approach. Specifically, this capability enables earlier engagements, expanded battlespace, an increase in defended area, flexible firing doctrines, interceptor optimization and the tightening of operational seams. We cannot afford to slow these efforts or take our eye off the objectives and capabilities these programs will deliver. IBCS is approaching a key milestone decision, which will enable low-rate production to begin, execute additional development and operational tests, and field an initial operational capability in 2022. Further integrating IBCS with other Army systems must be a future priority: It is the standard bearer for air and missile defense integrated operations and a key enabler for dealing with complex and integrated attacks. This investment requires sustained support from the Department of Defense and Congress as well as priority funding as we wrestle with flat budgets and COVID-19's fiscal challenges and potential bills. The Army is expected to add IBCS to Project Convergence — a good plan, but this action cannot become a distraction or diversion of resources that slows its development and fielding. IBCS, as well as the integration of Patriot and THAAD, are critical to success in today's tactically and technically challenging operations, which are stressing the force. Our integration efforts must expand to all joint air and missile defense systems and to our allies and partners, who remain essential to our success. AIAMD will also be a major contributor to the Combined Joint All-Domain Command and Control concept and the Air Force's Advanced Battle Management System — two key programs focused on integration at the theater level. COVID-19 has changed our lives in many ways and will levy a bill on our defense budgets. We cannot allow integration programs or initiatives to become COVID-19 casualties because seeing first and understanding first are the most critical elements in managing a crisis and keeping it from becoming a catastrophe. Retired Lt. Gen. David Mann led U.S. Army Space and Missile Defense Command. He has also commanded Army air and missile defense forces in Iraq, Southwest Asia and the United States. Retired Maj. Gen. Francis Mahon served as the director for strategy, policy and plans at North American Aerospace Defense Command and U.S. Northern Command. He also commanded Army air and missile defense forces in Southwest Asia, South Korea and the United States. https://www.c4isrnet.com/battlefield-tech/c2-comms/2020/10/29/in-a-covid-19-world-system-integration-is-the-best-approach/

  • Contract Awards by US Department of Defense - July 21, 2020

    July 22, 2020 | International, Aerospace, Naval, Land, C4ISR, Security

    Contract Awards by US Department of Defense - July 21, 2020

    AIR FORCE Raytheon Co. Missile Systems, Tucson, Arizona, has been awarded a $375,000,000 indefinite-delivery/indefinite-quantity contract for a miniature self-defense missile. The contract provides for the research and development of a flight-test ready missile. The first task order is $93,380,234. Work will be performed in Tucson, Arizona, and is expected to be completed by October 2023. This award is the result of a competitive acquisition and two offers were received. Fiscal 2020 research, development, test and evaluation funds in the amount of $26,712,000 are being obligated at the time of award. Air Force Research Laboratory, Eglin Air Force Base, Florida, is the contracting activity (FA8651-20-D-0001). ARMY Booz Allen Hamilton Inc., McLean, Virginia (W9124L-20-D-0006); Calibre Systems Inc., Alexandria, Virginia (W9124L-20-D-0007); Janus Research Group LLC, Evans, Georgia (W9124L-20-D-0008); Tec-Masters Inc., Huntsville, Alabama (W9124L-20-D-0009); and Yorktown Systems Group Inc., Huntsville, Alabama (W9124L-20-D-0010), will compete for each order of the $247,000,000 firm-fixed-price contract to provide support to the Fires Center of Excellence; all commands on Fort Sill, Oklahoma; and Army Futures Command, to develop and produce training strategies, doctrine, concepts, instruction and products for the current and future force. Bids were solicited via the internet with 12 received. Work locations and funding will be determined with each order, with an estimated completion date of July 20, 2025. U.S. Army Field Directorate Office, Fort Eustis, Virginia, is the contracting activity. Walsh Motor City JV, Chicago, Illinois, was awarded a $22,344,000 firm-fixed-price contract for design and construction of a high-voltage substation at Detroit Arsenal, Michigan. Bids were solicited via the internet with seven received. Work will be performed in Warren, Michigan, with an estimated completion date of July 16, 2022. Fiscal 2020 military construction (Army) funds in the amount of $22,344,000 were obligated at the time of the award. U.S. Army Corps of Engineers, Louisville, Kentucky, is the contracting activity (W912QR-20-C-0027). WASHINGTON HEADQUARTERS SERVICES Qbase LLC, Beavercreek, Ohio, has been awarded a blanket purchase agreement (BPA) contract with an overall ceiling of $103,569,634. This BPA contract will provide a broad range of information technology support services for all of the Defense Acquisition University locations. Specifically, the BPA will support the following areas: video services operations, enterprise service desk/regional information technology, transition services, enterprise architecture, enterprise/network infrastructure, enterprise cybersecurity, telecommunications, web application design/development/maintenance and software, data warehousing, acquisition workforce qualification initiatives, systems engineering, talent management system, learning management system, human resources system and hardware installation. No funds are being obligated at the time of the award. The expected completion date is July 22, 2025. Washington Headquarters Services, Arlington, Virginia, is the contracting activity (HQ0034-20-A-0008). NAVY POWER Engineers Inc., Meridian, Idaho, is awarded a $60,000,000 maximum amount, indefinite-delivery/indefinite-quantity, architect-engineering contract for architect-engineer (AE) services for various electrical engineering projects and related services at multiple locations in all areas under the cognizance of Naval Facilities Engineering Command (NAVFAC) Pacific. No task orders are being issued at this time. Work will be performed at various Navy, Marine Corps, Air Force and other government facilities within the NAVFAC Pacific area of responsibility, including, but not limited to, Guam and the Northern Marianas Islands (70%); Australia (10%); Hawaii (10%); and other areas under the NAVFAC Pacific area of responsibility (10%). The work to be performed provides for AE electrical services with associated multi-discipline AE support services. AE services include engineering studies; preparation of Department of Defense 1391 documents; plans, specifications and cost estimates/parametric cost estimates, including preparation of design-build request for proposal contract documents or design-bid-build contract documents; functional analysis and conceptual design development; as-built drawings; and post-construction services. Projects may involve new construction, alteration, repair and installation of electrical facilities and systems. The term of the contract is not to exceed 60 months and work is expected to be completed by July 2025. Fiscal 2019 military construction (MILCON) (planning and design) contract funds in the amount of $10,000 are obligated on this award and will not expire at the end of the current fiscal year. Future task orders will be primarily funded by MILCON. This contract was competitively procured via the Navy Electronic Commerce Online website and two proposals were received. The Naval Facilities Engineering Command Pacific, Joint Base Pearl Harbor-Hickam, Hawaii, is the contracting activity (N62742-20-D-0003). Transoceanic Cable Ship Co. LLC, Baltimore, Maryland, is awarded an $18,577,008 modification under previously awarded firm-fixed-price contract N32205-19-C-3506 to fund the second six-month option period. The option will continue to provide one cable ship (CS Global Sentinel) which will be utilized to lay and repair cable for the Department of Defense worldwide. This contract includes a 12-month base period, two six-month option periods, two 12-month option periods and one 11-month option period. Work will be performed worldwide and is expected to be completed by December 2023. Operations and maintenance (Navy) funds in the amount of $17,477,326 are obligated and will expire at the end of fiscal 2020. Other procurement (Navy) funds in the amount of $1,099,681 are obligated and will expire at the end of fiscal 2022. The Military Sealift Command, Norfolk, Virginia, is the contracting activity (N32205-19-C-3506). DEFENSE ADVANCED RESEARCH PROJECTS AGENCY Applied Physical Sciences Corp., Groton, Connecticut, has been awarded a $10,305,072 cost-plus-fixed-fee contract to support a Defense Advanced Research Projects Agency research program. Fiscal 2020 research and development funds in the amount of $5,800,000 are being obligated at the time of award, with an estimated completion date of September 2021. The Defense Advanced Research Projects Agency, Arlington, Virginia, is the contracting activity (HR001120C0138). *Small Business https://www.defense.gov/Newsroom/Contracts/Contract/Article/2281833/source/GovDelivery/

  • Canada's top admiral says navy staff, resource needs in 'critical state' | Reuters

    November 28, 2023 | International, Naval

    Canada's top admiral says navy staff, resource needs in 'critical state' | Reuters

    Canada's understaffed and resource-stretched navy is in "a critical state" and might not be able to carry out its basic duties next year, the top admiral said in a YouTube video released this week.

All news