Back to news

November 30, 2024 | International, C4ISR, Security

Phishing-as-a-Service "Rockstar 2FA" Targets Microsoft 365 Users with AiTM Attacks

Rockstar 2FA phishing kit bypasses MFA, stealing Microsoft 365 credentials via AitM attacks and trusted platforms.

https://thehackernews.com/2024/11/phishing-as-service-rockstar-2fa.html

On the same subject

  • Pentagon officials see ‘troubling’ small business decline since COVID

    October 15, 2020 | International, Aerospace, Naval, Land, C4ISR, Security, Other Defence

    Pentagon officials see ‘troubling’ small business decline since COVID

    Joe Gould WASHINGTON ― Over recent months, the U.S. Defense Logistics Agency has awarded hundreds of millions of dollars in contracts for the federal response to the coronavirus pandemic, but that's not necessarily benefitting the Defense Department's usual vendors. In fact, the Pentagon contracting arm is seeing fewer small businesses in its traditional supplier base competing for contracts in the wake of the coronavirus pandemic, the director of the DLA's Office of Small Business Programs, Dwight Deneal, said Tuesday. “Our percentages [of small business involvement] are as high as they've ever been over the past five years, but we are recognizing that the participation level from our supplier base's standpoint has steadily declined,” Deneal said at a small business panel at the Association of the U.S. Army's annual meeting, which was being conducted virtually. “So [the DLA is] looking at the gaps in there and how do we strategically attack those areas where some of our suppliers are just not participating in or winning some DLA contracts,” Deneal said, adding that the agency plans to roll out a new virtual outreach effort next month to reengage its small suppliers. The comments came as the Pentagon faces congressional scrutiny amid reports it awarded lucrative contracts for disposable medical gowns to a handful of unexpected and inexperienced companies despite bids from more than 100 vendors with track records of successfully completing federal procurement contracts. To boot, the Pentagon's allocation of $688 million to aid troubled suppliers of aircraft engine parts as well as shipbuilding, electronics and space launch services is facing anger on Capitol Hill because the money wasn't spent to increase the country's supply of medical equipment. Pentagon officials have denied any wrongdoing and stressed the need to support companies large and small that make up the defense industrial base. Without mentioning either controversy, Deneal said the DLA's dealings on personal protective equipment contracts reflected a commitment to small businesses and efforts to revive domestic supply chains for PPE, widely regarded as a necessity in the wake of the pandemic. “A lot of companies are starting to pivot their assembly lines to start to get into the business of producing PPE, and that has been quite clear from some of our last solicitations ... for gowns, where we had robust competition from small businesses ― companies that had traditionally never bid on government contracts,” Deneal said. “We were able to allow that competition pool and subsequent awards to be small business awards, and I think that speaks to the importance that DLA sees and [places on] the small business community,” Deneal added. “It goes to show how our acquisition community is forward thinking and forward leaning.” The decline in small business participation extends beyond the DLA. The director the Navy's Office of Small Business Programs, Jimmy Smith, said his data showed a similar and “troubling” trend in need of targeted contracting activity by the Navy. “We're spending about the same, equivalent money every year, but one of the things we're watching in our supplier base is a pretty steep decline in industry partners in certain areas,” Smith said. “I think [it's] incumbent upon us to understand what those shortcomings are and [offer] some solicitations, sources sought in a number of areas where we are seeing a decline in industry partner involvement.” Smith plans to address the gap in the coming year by pushing contacting officers to directly deal with small businesses and by enforcing agreements with large contractors that they flow work to smaller partners. “It's definitely troubling from our standpoint on making sure we've got a viable supplier base,” Smith said. “Having a fragile supplier base does us no good, and it actually impacts the war fighter in negative ways.” https://www.defensenews.com/2020/10/13/pentagon-officials-see-troubling-small-business-decline-since-covid/

  • France buys 42 Rafale jets for more than $5.5 billion

    January 13, 2024 | International, Land

    France buys 42 Rafale jets for more than $5.5 billion

    The purchase comes as French lawmakers express concerns about the Franco-German project to develop a successor to the fighter.

  • Production of one of the F-35′s most anticipated bombs has been on hold for almost a year

    June 15, 2020 | International, Aerospace

    Production of one of the F-35′s most anticipated bombs has been on hold for almost a year

    By: Valerie Insinna WASHINGTON — Deliveries of a new precision-guided bomb under development by Raytheon for the F-35 and other fighter jets have been at a standstill for about a year as the company struggles to correct a technical problem involving a key component. A fix for the issue, which brought production of the Small Diameter Bomb II to a halt in July 2019, could be approved by the government as soon as July, said Air Force spokesman Capt. Jake Bailey in response to questions by Defense News. However, a June report by the Government Accountability Office pointed out that continued technical issues have already caused a delay in fielding the munition, with Raytheon forced to redesign a key component and retrofit all 598 bombs already delivered to the Air Force and Navy. The Small Diameter Bomb II — also known as the GBU-53 StormBreaker — was designed with a tri-mode seeker that includes a millimeter wave radar, imaging infrared and semi-active laser that allow the weapon to engage targets in all weather conditions and environments where visibility is obscured by dust and debris. The Air Force and Navy plan to integrate SDB II with a range of fighter aircraft including the F-15, F/A-18 Super Hornet and F-35 joint strike fighter, but the munition has been mired in development for more than a decade. This latest stoppage in production was prompted by internal audits by Raytheon, which found that the clips used to hold the bomb's fins in place “suffered vibration fatigue over long flight hours,” Bailey said. The clips serve “as the backup fin storage device” used to keep the fins in place in case other components fail, noted Bailey, who added that there have been no incidents during tests involving the SDB II fins inadvertently deploying. However, the GAO wrote that the premature deployment of the fins, which help guide the bomb in flight, could damage the weapon as well as cause a safety hazard for the aircraft carrying it. “While this problem could affect all aircraft carrying the bomb, officials said the greatest impact is to the F-35, because the bomb is carried in the aircraft's internal weapons bay and could cause serious damage if the fins deploy while the bomb is in the bay,” the GAO stated. Raytheon declined to comment on this story, directing questions to the Air Force. Raytheon plans on mitigating the issue with a newly designed clip that reduces the vibration of the fins, and will completely pay for developing the fix and retrofitting it on the bombs that have already been delivered, the GAO said. The Air Force confirmed that testing of the new device has already been completed and is going through final reviews. But while Raytheon and the Air Force had hoped to restart production in April, travel restrictions caused by the ongoing global COVID-19 pandemic contributed to further delays. The government now hopes to approve the fix in July, after which production will restart and the retrofit process for existing bombs will begin. “The fin clip failure is the sole reason production was partially halted; once final government approval is obtained, ‘all up round' production can resume,” Bailey said, using a phrase that describes a fully assembled weapon. The Air Force estimates that retrofits will be completed by August, as Raytheon's supplier has already begun manufacturing the replacement component, which are easily installed on the outside of the weapon. “Until production resumes, the total Lot 3 deliveries remain at 204 of the 312 assets on contract,” Bailey said. All this puts initial operational capability at least a year later than the service's original timeline, which predicted IOC would occur in September 2019. The Air Force declined to name a current estimate for when IOC would be achieved, but said it would happen after a separate milestone known as the “initial fielding decision,” which involves the approval of the head of Air Combat Command and is set for the third quarter of 2020. The issue with SDB II's fins is just one of several technical problems with which Raytheon is grappling. The program completed operational tests in 2019, but hardware and software changes are needed after 11 failures were reported. Two hardware fixes have already been put in place, and eight failures were related to software problems that will be addressed in future updates, the GAO said. The sole outstanding issue involves an anomaly with SDB II's guidance system. Fixing it could require Raytheon to redesign the component and conduct retrofits on all bombs already delivered, according to GAO. A review board of the problem is in the “final stages of analysis,” Bailey said. The Air Force and Raytheon plan to establish whether a replacement component is necessary no later than June 30. Although the weapon has not even been officially fielded, some components are already becoming obsolete. A Raytheon subcontractor that makes circuit cards used in the guidance system is expected to stop producing those components years sooner than anticipated. As a result, that the Defense Department may have to order all circuit cards needed for the program of record before December, according to the GAO. That timeline has now been extended to January 2022, “which provides ample time for program office action before the new deadline,” Bailey said. Despite the bomb's ongoing problems, Raytheon continues to rake in contracts for the program. In February, the Defense Department awarded a $15 million increase to a previous SDB II contract for additional technical support. In September, the company received a $200 million contract for lifecycle support during the bomb's engineering and manufacturing development phase. According to a Raytheon news release, the Navy recently completed the first guided release of SDB II from a F/A-18E/F Super Hornet. https://www.defensenews.com/air/2020/06/12/production-of-one-of-the-f-35s-most-anticipated-bombs-has-been-on-hold-for-almost-a-year

All news