December 29, 2024 | International, C4ISR, Security
Apache MINA CVE-2024-52046: CVSS 10.0 Flaw Enables RCE via Unsafe Serialization
Critical Apache MINA flaw CVE-2024-52046 with CVSS 10.0 enables RCE via serialization flaws. Patch required.
May 17, 2018 | International, C4ISR
How would NATO respond to a cyberattack?
By: Martin Banks
NATO Secretary General Jens Stoltenberg says “it is time we all woke up to the potential dangers of cyber threats.”
Speaking at a conference on cyber crime in Paris May 15, Stoltenberg said, “In the Second World War there was a popular saying, ‘Loose lips sink ships.' Today, it is weak passwords, failing to add software updates, or opening unfamiliar emails. Simple things. But if we get them right, we go a long way to protecting ourselves.”
Stoltenberg was speaking at the Ecole Militaire in the French capital on a major conference on NATO's so-called “Cyber Defence Pledge” which, he said, had helped nations to look at their cyber-defences in a more holistic way.
NATO countries have faced a series of attacks in recent years.
In France, TV-Cinq Monde was taken off air by hackers while Fancy Bear, a group associated with the Kremlin, hacked the main political parties in the United States in what Stoltenberg called “a brazen attempt to influence the 2016 election.”
Last year's WannaCry attack forced Renault to halt production at several of its factories and a cyberattack brought hospitals in the UK to a standstill.
“The very nature of these attacks is a challenge,” Stoltenberg said. “It is often difficult to know who has attacked you or even if you have been attacked at all. There are many different actors.
“Governments, but also criminal gangs, terrorist groups and lone individuals. Nowhere is the ‘Fog of War' thicker than it is in cyberspace,” he said. “If these were hard attacks, using bombs or missiles instead of computer code, they could be considered an act of war. But instead, some are using software to wage a soft-war - a soft-war with very real, and potentially deadly consequences.”
In 2014, NATO leaders agreed that a cyberattack could trigger Article 5, meaning that an attack on one ally is treated as an attack on all allies.
He added, “I am often asked, ‘under what circumstances would NATO trigger Article 5 in the case of a cyber-attack?' My answer is: we will see. The level of cyberattack that would provoke a response must remain purposefully vague as will the nature of our response.
“But it could include diplomatic and economic sanctions, cyber-responses, or even conventional forces, depending on the nature and consequences of the attack.But whatever the response, NATO will continue to follow the principle of restraint. And act in accordance with international law.”
In less than two years, almost every ally had upgraded their cyber defences with France leading the way, investing €1.6 billion and employing thousands more cyber experts.
He also pointed to Nato's new Command Structure and Cyber Rapid Reaction teams.
On the same subject
-
-
June 25, 2019 | International, Aerospace
Navy Buys Tech that Can Land F-35s on Carriers with Pinpoint Accuracy
By Hope Hodge Seck When the Navy's F-35C Joint Strike Fighter embarks on its first carrier deployment in 2021, it's expected to take with it a pinpoint-accurate landing system that purports to make the terror of night approaches and high sea-state traps all but a thing of the past. Raytheon announced this week that the Navy awarded a $234.6 million contract for a low-rate initial production of 23 of its Joint Precision Approach and Landing Systems, or JPALS -- enough to outfit every carrier and L-class amphibious assault ship with the technology. The contract also will include retrofitting three earlier systems that had been installed, a Raytheon executive said. Delivering to the Navy will start late next year, and installation will begin shortly thereafter, retired Navy Rear Adm. C.J. Jaynes, Raytheon's JPALS technical executive, told Military.com this week. The work is expected to be completed by August 2023, according to a published contract announcement. The system, which uses shipboard-relative GPS to guide planes in for landings and communicates with the aircraft from the deck of the carrier up to 200 nautical miles out, is accurate within 20 centimeters, or about 8 inches, Jaynes said. "It hits the third wire every time," she said. "It's [reliable in] all-weather and all sea states, including Sea State 5 (waves of roughly 8 to 12 feet)." For Navy pilots, catching the third of four wires on tailhook landings (or the second of three wires) has historically been a game of skill and precision that becomes orders of magnitude more difficult in the dark or in low-visibility weather conditions. Marine Corps F-35B pilots, who use the aircraft's vertical-landing configuration to put it down on the smaller flight decks of amphibious ships, face the same problems. And those issues may actually be exacerbated by a number of F-35-specific issues pending resolution. The custom-made, $400,000-per-unit helmet that F-35 pilots wear -- a piece of technology that allows them to "see through" the plane via a display for better situational awareness -- features symbology that emits a green glow, interfering with pilots' vision in low-light conditions. A video that emerged in 2017 showed an F-35 pilot landing "in a fog" on the amphibious assault ship America at night, his vision obscured by the helmet display. A recent Defense News report highlighted another issue with the helmet display at night that obscures the horizon. JPALS, which has already deployed in an early-development version with F-35Bs aboard the amphibious assault ships Wasp and Essex, would decrease reliance on visibility for accurate landings. Another F-35C-installed tool, Delta Flight Path, will keep aircraft on a steady glide slope for carrier landings, reducing inputs and corrections required from pilots. Early reports from the JPALS deployments with the Marines have been extremely positive, Jaynes said. "The pilots absolutely love it. It's been 100 percent accuracy, always available, they haven't had any issues at all," she said. "We know they have not had to abort any missions due to weather or due to sea state." Raytheon is now pitching an expeditionary version of JPALS, easily transportable and designed to guide aircraft to safe landings on bare airfields. The whole system can fit in five transit cases, be transported by C-130 Hercules, and be assembled within 90 minutes, Raytheon says. The Navy's future tanker drone, the MQ-25 Stingray, will also be JPALS-equipped; Jaynes said Raytheon is in talks with the service now about selling expeditionary JPALS for the MQ-25 program for shore-based tanker landings at locations like Norfolk, Virginia, or Point Mugu, California. Meanwhile, she said, the Marine Corps is considering buying a single expeditionary JPALS system for testing in order to develop a concept of operations to employ it. But "the closest customer outside of MQ-25 is actually the U.S. Air Force," Jaynes said. "They'd be able to move their aircraft possibly every 24 to 48 hours and do island-hopping in the Pacific. We're going over to [United States Air Forces in Europe -- Air Forces Africa] in July to talk with them about the system," she said. https://www.military.com/daily-news/2019/06/21/all-navy-carriers-amphibs-get-f-35-precision-landing-system.html
-
September 25, 2019 | International, Aerospace
Boeing gets $227 million delivery order for landing gear to support Super Hornet readiness
Aerospace giant Boeing Co. has been awarded a $227 million U.S. Navy delivery order for the procurement of main and nose landing gear assemblies in support of the Super Hornet aircraft. According to a statement issued Monday by U.S. Department of Defense, Boeing awarded a delivery order for the landing gears for the F/A-18E/F multirole fighter aircraft and EA-18G Growler electronic warfare aircraft, a specialized version of the two-seat F/A-18F Super Hornet. The period of performance for this delivery order begins in October 2019 and will be completed by March 2023 with no option periods. Work will be performed in St. Louis, Missouri. The combat-proven Super Hornet delivers cutting-edge, next-generation multi-role strike fighter capability, outdistancing current and emerging threats well into the future. The Super Hornet has the capability, flexibility and performance necessary to modernize the air or naval aviation forces of any country. Two versions of the Super Hornet – the single-seat E model and the two-seat F model – are able to perform virtually every mission in the tactical spectrum, including air superiority, day/night strike with precision-guided weapons, fighter escort, close air support, suppression of enemy air defenses, maritime strike, reconnaissance, forward air control and tanker missions. As to the EA-18G Growler, this is the most advanced airborne electronic attack (AEA) platform and is the only one in production today. A variant of the combat-proven F/A-18F Super Hornet, the Growler provides tactical jamming and electronic protection to U.S. military forces and allies around the world. https://defence-blog.com/news/boeing-gets-227-million-delivery-order-for-landing-gear-to-support-super-hornet-readiness.html