Back to news

September 14, 2024 | International, C4ISR, Security

Progress WhatsUp Gold Exploited Just Hours After PoC Release for Critical Flaw

Critical WhatsUp Gold vulnerabilities exploited within hours of PoC release. Attackers bypass authentication to install remote access tools.

https://thehackernews.com/2024/09/progress-whatsup-gold-exploited-just.html

On the same subject

  • DIUx wants drones that are out for blood

    May 4, 2018 | International, Aerospace

    DIUx wants drones that are out for blood

    By: Kelsey Atherton For drone delivery to make sense, with existing capabilities of drones, the cargo needs to be relatively light, it needs to have tremendous value, and it needs to urgently travel the last mile by air. This is why, to the extent we've seen drones used for delivery in the wild, it's more likely as a means to carry contraband into a prison than it is a practical alternative to the postal service. But there's one other cargo that fits the description, and that's blood itself. Defense Innovation Unit Experimental, the Pentagon's stand-up Silicon Valley-focused acquisition house, is looking for a drone that can carry a modest cargo of blood, through the dark of night toward where it's most needed. Call it “Dronesferatu.” From FCW: The specs of the solicitation from the Defense Innovation Unit Experimental -- the ability to deliver a 5-pound package over 100 kilometers in “austere environments” -- strongly suggest that they're looking at an unmanned aerial vehicle system that supports refrigeration or other means of temperature control. “These deliveries, ideally automated, will provide essential items to critically wounded military personnel as quickly as possible after an injury occurs,” the April 23 solicitation states. “Ability to sustain a very high frequency of operations over an extended period of time is critical. Speed of delivery, reliability and robustness to failure and interference, response time, and overall delivery throughput are critical.” Getting the right blood to the right people as fast as possible means saving lives. To that end, DARPA's funded research into metabolic rate reduction to see if there's a way to make people bleed out more slowly, or into using female hormones to similarly prolong the survivable time without transfusion. In 2013, the U.S. Army conducted a study on pre-hospital transfusion for battlefield casualties being medically evacuated in Afghanistan, and in 2012 Canadian Blood Services even tested the viability of paratroopers transporting blood for transfusion. Consider blood drones complementary to this field of work. Early tests by researchers at Johns Hopkins and Uganda's Makerere University proved that small vials of blood transported by drone were just as viable as blood transported by car. Those same researchers followed up with a test of blood delivery from ship-to-shore, for possible use in response to coastal areas hit by natural disasters, where the roads are impassable but drones could still safely fly. The American startup Zipline demonstrated its own blood delivery drones in 2016, and has for a year and a half worked on delivering blood by robot to parts of Rwanda. DIUx's ask, that a drone fly over 60 miles and carry 5 pounds of blood, is not far off from what Zipline's drones can already do, with the company stating a range of 100 miles and a cargo capacity of just under four pounds. Weight and range tradeoffs are at the heart of aviation design, so it's likely that vendors have already pitched something within the bounds of the solicitation. Should that drone make a fast turnaround from ask to prototype to useful tool, the troops fighting abroad may gain a better shot at surviving otherwise-fatal blood loss. Unlikely that the reverse-vampire drones will look like bats, though. https://www.c4isrnet.com/unmanned/2018/05/03/diux-wants-drones-that-are-drones-out-for-blood/

  • Top Air Force officer's plan to 'accelerate change or lose' is picking up speed, one year in

    September 23, 2021 | International, Aerospace

    Top Air Force officer's plan to 'accelerate change or lose' is picking up speed, one year in

    '€œWe could all use more manpower, more money and more time. But leaders cannot wait for perfect conditions to act or make a decision," Brown said.

  • Contract Awards by US Department of Defense - January 27, 2021

    January 28, 2021 | International, Aerospace, Naval, Land, C4ISR, Security

    Contract Awards by US Department of Defense - January 27, 2021

    ARMY Eli Lilly and Co., Indianapolis, Indiana, was awarded a $625,000,000 modification (P00007) to contract W911QY-21-C-0016 for 500,000 doses of LY-CoV555, a COVID-19 therapeutic drug treatment. Work will be performed in Indianapolis, Indiana, with an estimated completion date of Jan. 27, 2021. Fiscal 2021 Coronavirus Aid, Relief and Economic Security Act funds in the amount of $625,000,000 were obligated at the time of the award. U.S. Army Contracting Command, Aberdeen Proving Ground, Maryland, is the contracting activity. (Awarded Jan. 26, 2021) Bay Ship & Yacht Co., Alameda, California (W56HZV-21-D-L002); Colonna's Shipyard Inc.,* Norfolk, Virginia (W56HZV-21-D-L003); Conley Marine Services,* Harvey, Louisiana (W56HZV-21-D-L004); Fairlead Boatworks Inc., Newport News, Virginia (W56HZV21DL005); GMD Shipyard Corp.,* Brooklyn, New York (W56HZV-21-D-L006); Gulf Copper & Manufacturing Corp.,* Galveston, Texas (W56HZV-21-D-L007); Lyon Shipyard Inc.,* Norfolk, Virginia (W56HZV-21-D-L008); Mare Island Dry Dock, Vallejo, California (W56HZV-21-D-L009); Metal Trades Inc.,* Yonges Island, South Carolina (W56HZV-21-D-L010); Murtech Inc.,* Glen Burnie, Maryland (W56HZV-21-D-L011); Platypus Marine Inc., Port Angeles, Washington (W56HZV-21-D-L012); Swiftships LLC,* Morgan City, Louisiana (W56HZV-21-D-L013); Vigor Marine LLC, Portland, Oregon (W56HZV-21-D-L014); and Yank Marine Services,* Dorchester, New Jersey (W56HZV-21-D-L015), will compete for each order of the $235,000,000 firm-fixed-price contract for the purpose of performing on-condition cyclic maintenance, modifications, modernizations and repairs, requiring the use of a dry dock as well as sustainment maintenance, modernization efforts on the Army Watercraft Fleet of vessels. Bids were solicited via the internet with 16 received. Work locations and funding will be determined with each order, with an estimated completion date of Jan. 26, 2026. U.S. Army Contracting Command, Detroit Arsenal, Michigan, is the contracting activity. Swiftships LLC,* Morgan City, Louisiana (W56HZV-21-D-L018); Heavy Engineering Industries and Shipbuilding Co., Shuwaikh, Kuwait (W56HZV-21-D-L019); Japan Marine United Co., Yokohama, Japan (W56HZV-21-D-L020); Orient Shipyard Co. Ltd., Pusan, South Korea (W56HZV-21-D-L021); Sumitomo Heavy Industries Ltd., Yokosuka, Japan (W56HZV-21-D-L022); Sunjin Entech Co. Ltd, Pusan, South Korea (W56HZV-21-D-L023); and Yokohama Engineering Works Ltd., Yokohama, Japan (W56HZV-21-D-L024), will compete for each order of the $180,000,000 firm-fixed-price contract for the follow-on efforts for the Watercraft Inspection Branch and Army Watercraft Systems Product Directorate to combine its shipyard efforts to efficiently execute modifications, modernizations and on-condition cyclic maintenance efforts for its existing fleet of vessels. Bids were solicited via the internet with seven received. Work locations and funding will be determined with each order, with an estimated completion date of Jan 26, 2026. U.S. Army Contracting Command, Detroit Arsenal, Michigan, is the contracting activity. Colonna's Shipyard Inc.,* Norfolk, Virginia (W56HZV-21-D-L025); Conley Marine Services LLC,* Harvey, Louisiana (W56HZV-21-D-L026); Continental Tide Defense Systems Inc., Wyomissing, Pennsylvania (W56HZV-21-D-L027); Epsilon Systems Solutions Inc., Portsmouth, Virginia (W56HZV-21-D-L028); Guam Industrial Services Inc., Agat, Guam (W56HZV-21-D-L029); Heavy Engineering Industries & Shipbuilding, Shuwaikh Port Area, Western Extension Shuwaikh, Kuwait (W56HZV-21-D-L030); HII Fleet Support Group LLC, Virginia Beach, Virginia (W56HZV-21-D-L031); L3 Unidyne Inc., Norfolk, Virginia (W56HZV-21-D-L032); Lyon Shipyard Inc., Norfolk, Virginia (W56HZV-21-D-L033); Metal Trades Inc.,* Yonges Island, South Carolina (W56HZV-21-D-L034); QED Systems Inc., Virginia Beach, Virginia (W56HZV-21-D-L035); Sumitomo Heavy Industries Ltd., Yokosuka, Kanagawa, Japan (W56HZV-21-D-L036); Sunjin Entech Co. Ltd., Pusan, South Korea (W56HZV-21-D-L037); and Yokohama Engineering Works Ltd., Yokohama, Kanagawa, Japan (W56HZV-21-D-L038), will compete for each order of the $155,000,000 firm-fixed-price contract for unprogrammed maintenance, emergency repair, modification and modernization efforts that do not require the use of a dry dock. Bids were solicited via the internet with 15 received. Work locations and funding will be determined with each order, with an estimated completion date of Jan. 26, 2026. U.S. Army Contracting Command, Detroit Arsenal, Michigan, is the contracting activity. Indtai Inc.,* Vienna, Virginia, was awarded an $8,021,713 modification (P00004) to contract W9124J-20-C-0012 to provide educational support services in education centers located on over 60 Army garrisons in the continental U.S., Alaska, Hawaii, Puerto Rico, Japan and the Republic of Korea. Work will be performed in San Antonio, Texas, with an estimated completion date of Jul. 27, 2021. Fiscal 2021 operation and maintenance (Army) funds in the amount of $8,021,713 were obligated at the time of the award. U.S. Army Field Directorate Office, Fort Sam Houston, Texas, is the contracting activity. NAVY CH2M Hill Inc., Englewood, Colorado, is awarded a maximum value $480,000,000 cost-plus-award-fee, indefinite-delivery/indefinite-quantity, architect-engineering contract for comprehensive long-term environmental action services in the Naval Facilities Engineering Systems Command (NAVFAC) Atlantic area of responsibility (AOR). The work to be performed provides for architectural and engineering services to provide program management and technical environmental services in support of the Department of the Navy's Environmental Restoration Program, Munitions Response Program and other similar programs at any Navy and Marine Corps activity in the AOR covered by NAVFAC Atlantic. Future task orders will be primarily funded by environmental restoration (Navy) funds. An initial task order is being awarded at $200,000 for architect-engineering services at the program management office in Virginia Beach, Virginia, and is expected to be completed by March 2022. All work on this contract will be performed within the NAVFAC Atlantic AOR including, but not limited to, North Carolina (25%); Puerto Rico (25%); Virginia (25%); Maryland (10%); California (5%); District of Columbia (3%); West Virginia (3%); Washington (2%); and Alaska (2%), and is expected to be completed by January 2026. Fiscal 2021 environmental restoration (Navy) funds in the amount of $200,000 will be obligated at time of award and will not expire at the end of the current fiscal year. This contract was competitively procured via the Federal Business Opportunities website, with two proposals received. The Naval Facilities Engineering Systems Command, Atlantic, Norfolk, Virginia, is the contracting activity (N62470-21-D-0007). Lockheed Martin Corp., Orlando, Florida, is awarded a not-to-exceed $49,663,781 undefinitized firm-fixed-price modification (P00001) to cost-plus-fixed-fee order N00019-21-F-0062 against previously issued basic ordering agreement N00019-19-G-0029. This modification adds scope for the production and delivery of 19 AN/AAQ-30A Target Sight Systems; 14 for the government of Bahrain and five for the government of the Czech Republic. Work will be performed in Orlando, Florida (36%); Burlington, Ontario, Canada (34%); Merrimack, New Hampshire (14%); Ocala, Florida (5%); Santa Barbara, California (3%); and various locations within the continental U.S. (8%), and is expected to be completed in January 2023. Foreign Military Sales funds in the amount of $7,433,265 will be obligated at the time of award, none of which will expire at the end of the current fiscal year. The Naval Air Systems Command, Patuxent River, Maryland, is the contracting activity. (Awarded Jan. 26, 2021) Maxon Furniture Inc., Muscatine, Iowa, is awarded a $34,924,508 firm-fixed-price, indefinite-delivery/indefinite-quantity contract. This contract provides furniture finishes and equipment to ensure office furniture standardization, sustainability and maximum flexibility of personnel office spaces including design services and installation. Work will be performed in Muscatine, Iowa, and is expected to be completed in January 2026. Fiscal 2021 working capital (Navy) funds in the amount of $2,733 will be obligated at time of award, none of which will expire at the end of the current fiscal year. This contract was competitively procured via an electronic request for proposal; three offers were received. The Naval Air Warfare Center, Weapons Division, China Lake, California, is the contracting activity (N68936-21-D-0011). Bell Boeing Joint Project Office, Amarillo, Texas, is awarded a $25,523,136 modification (P00005) to cost-plus-fixed-fee, firm-fixed-price order N00019-20-F-0315 against previously issued basic ordering agreement N00019-17-G-0002. This modification adds scope for the production and delivery of nine right aft sponson fuel tank kits in support of V-22 Production Aircraft 9-17 for the government of Japan. Additionally, this modification provides development and updates to existing technical data as well as services in support of aircraft deliveries and aircrew pilot and crew chief training for the government of Japan. Work will be performed in Jacksonville, North Carolina (35%); Chiba Provence, Japan (35%); Ridley Park, Pennsylvania (20%); Stennis, Mississippi (5%); and Fort Worth, Texas (5%), and is expected to be completed in March 2024. Foreign Military Sales funds in the amount of $25,523,136 will be obligated at time of award, none of which will expire at the end of the current fiscal year. The Naval Air Systems Command, Patuxent River, Maryland, is the contracting activity. Lockheed Martin Corp., Marietta, Georgia, is awarded a $11,403,660 cost-plus-fixed-fee indefinite-delivery/indefinite-quantity contract. This contract provides engineering and logistics services in support of the Maritime Patrol and Reconnaissance Aircraft program to monitor and manage fatigue and obsolescence issues and operational and/or technical problems arising from P-3 fleet usage for the Navy, Foreign Military Sales customers and other U.S. government agencies. Work will be performed in Marietta, Georgia, and is expected to be completed in January 2026. No funds will be obligated at the time of award; funds will be obligated on individual orders as they are issued. This contract was not competitively procured pursuant to Federal Acquisition Regulation 6.302-1. The Naval Air Warfare Center Aircraft Division, Lakehurst, New Jersey, is the contracting activity (N68335-21-D-0045). Boeing Distribution Inc., Dallas, Texas, is awarded an $8,624,300 firm-fixed-price modification (P00008) to previously awarded contract N00019-18-C-0055. This modification adds scope for the production and delivery of two P-8A engine build up kits and associated mating to core engine; one for the government of New Zealand and one for the government of Australia. Work will be performed in Dallas, Texas (50%); and Everett, Washington (50%), and is expected to be completed in June 2022. Foreign Military Sales funds in the amount of $8,624,300 will be obligated at time of award, none of which will expire at the end of the current fiscal year. The Naval Air Systems Command, Patuxent River, Maryland, is the contracting activity. AIR FORCE Lockheed Martin Aeronautics, Marietta, Georgia, has been awarded a $129,363,552 firm-fixed-price, cost-plus-fixed-fee, cost-reimbursable, indefinite-delivery/indefinite-quantity contract for C-5 contractor logistic support services. This contract involves supply chain management, repair and technical support services. Work will be performed in Marietta, Georgia; and Greenville, South Carolina, and is expected to completed Jan. 31, 2022. This award is the result of a sole-source acquisition. Fiscal 2021 Material Supply Division; and operation and maintenance funds in the amount of $31,544,612 are being obligated at the time of award by way of task order FA8525-21-F0003. Air Force Life Cycle Management Center, Robins Air Force Base, Georgia, is the contracting activity. L3Harris Technologies Inc., Colorado Springs, Colorado, has been awarded an $89,712,422 fixed-price-incentive-firm modification (P00024) to contract FA8823-20-C-0004 for system sustainment services Option Year Two. This modification updates and revises the Maintenance of Space Situational Awareness Integrated Capabilities system sustainment performance requirements for the current option year. Work will be performed in Colorado Springs, Colorado; and Dahlgren, Virginia, and is expected to be completed Jan 31, 2022. Fiscal 2021 operation and maintenance funds in the amount of $55,578,977 are being obligated at the time of award. Total cumulative face value of the contract is $315,420,730. Space and Missile Systems Center, Peterson Air Force Base, Colorado, is the contracting activity. Gulfstream Aerospace Corp., Savannah, Georgia, has been awarded an $83,831,036 firm-fixed-price modification (P00014) to contract FA8106-18-D-0002 for C-20/C-37 fleet sustainment. The contract modification is for exercise of Option Year Four, to include issuance of task orders for a one-year extension of contract term to support the C-20 and C-37 fleet for the Air Force, Army, Navy, Marines and Coast Guard; funding uninterrupted continuation of contractor logistics. Work will be performed in Savannah, Georgia; Naval Air Station Sigonella, Italy; Ramstein Air Base, Germany; Joint Base Andrews, Maryland; Hickam Air Force Base, Hawaii; Marine Corps Base Hawaii, Hawaii; and Ronald Reagan Washington National Airport, Washington, D.C. The work is expected to be completed Jan. 31, 2022. Fiscal 2021 operation and maintenance funds in the amount of $44,482,293 are being obligated at the time of award. Total cumulative face value of the contract is $594,429,554. Air Force Life Cycle Management Center, Tinker AFB, Oklahoma, is the contracting activity. MilSup LLC, Las Vegas, Nevada, has been awarded a $50,628,080 firm-fixed-price contract for the RC/OC/WC-135 and E-4B Contract Aircrew Training (CAT) and Courseware Development (CWD) program. The contractor will furnish all personnel, equipment, tools, materials, supervision and all other items and services that are required to perform RC/OC/WC-135 and E-4B CAT and CWD. Work will be performed at Offutt Air Force Base, Nebraska, and is expected to be completed March 31, 2026. This award is the result of a competitive Service Disabled Veteran-Owned Small Business acquisition and six offers were received. Fiscal 2021 operation and maintenance funds in the amount of $145,476 are being obligated at the time of award. Air Combat Command, Acquisition Management and Integration Center, Joint Base Langley-Eustis, Virginia, is the contracting activity (FA4890-21-C-0001). U.S. TRANSPORTATION COMMAND Eleven (11) companies have been awarded Option Year 3 modifications under the following Category A (CAT A) III, Indefinite Delivery Indefinite Quantity, Fixed Price contracts: HTC711-18-D-C003/P00008 American Airlines of Fort Worth, TX; HTC711-18-D-C004/P00008 Air Transportation International (ATI) of Irving, TX; HTC711-18-D-C005/P00008 Atlas Air of Purchase, NY; HTC711-18-D-C006/P00008 Delta Air Lines, Inc. of Atlanta, GA; HTC711-18-D-C007/P00008 FedEx of Washington, DC; HTC711-18-D-C008/P00008 Hawaiian Airlines, Inc. of Honolulu, HI; HTC711-18-D-C011/P00008 National Air Cargo, Inc. of Orlando, FL; HTC711-18-D-C012/P00008 Polar Air Cargo Worldwide, Inc. of Purchase, NY; HTC711-18-D-C013/P00008 United Parcel Service Co. (UPS) of Louisville, KY; HTC711-18-D-C014/P00008 USA Jet Airlines of Belleville, MI; and HTC711-18-D-C015/P00008 Western Global Airlines (WGA) of Estero, FL. The companies are eligible to compete at the task order level for an option year estimated amount of $34,732,959. The program's cumulative value increased from $124,325,701 to $159,058,660 (estimated). This modification provides international commercial scheduled air cargo transportation services. Services encompass time-definite, door-to-door pick-up and delivery, transportation, Intransit Visibility (ITV), Government-Approved Third Party Payment System participation, and expedited customs processing and clearance of less than full planeloads for the movement of regular and recurring hazardous, refrigerated/cold chain (perishable), life and death, narcotics, and other regular recurring cargo shipments. Work will be performed world-wide. Option Year 3 period of performance is Feb. 1, 2021 to Jan. 31, 2022. United States Transportation Command (USTRANSCOM), Directorate of Acquisition, Scott Air Force Base, IL, 62225-5357, is the contracting activity. *Small business https://www.defense.gov/Newsroom/Contracts/Contract/Article/2484774/source/GovDelivery/

All news