Back to news

June 3, 2024 | International, Security

Researcher Uncovers Flaws in Cox Modems, Potentially Impacting Millions

Researchers discovered authorization bypass vulnerabilities in Cox modems that could have allowed hackers to access and control millions of devices.

https://thehackernews.com/2024/06/researcher-uncovers-flaws-in-cox-modems.html

On the same subject

  • Will defense budgets remain ‘sticky’ after the COVID-19 pandemic?

    May 27, 2020 | International, Aerospace, Naval, Land, C4ISR, Security

    Will defense budgets remain ‘sticky’ after the COVID-19 pandemic?

    By: Eric Lofgren Congress' unprecedented fiscal response to COVID-19 has many in the defense community wondering whether belt tightening will hit the Pentagon. On May 19, the Congressional Progressive Caucus wrote a letter arguing for substantial defense budget cuts to support additional spending on the pandemic. Nonprofit progressive supporters have been asking to cut a much larger $350 billion each year from the Pentagon in their “Moral Budget” proposal. What the progressives perhaps do not fully appreciate is the “stickiness” of defense budgets. In economics, stickiness refers to rigidity in the movement of wages and prices despite broader economic shifts pushing for new equilibrium. The phenomenon is apparent in defense budgets as well. Most expectations are that the fiscal 2021 budget will remain over $700 billion. Consider an analogy: the 2008 financial crisis. Lehman Brothers collapsed just a couple weeks before fiscal year 2009 started, leaving that $666 billion defense budget largely beyond recall. The following years' budgets were $691 billion, $687 billion, $646 billion and then finally in FY13 a more precipitous 10 percent fall to $578 billion. It took four years for the Pentagon to really feel the squeeze of the financial downturn. The uninitiated may believe COVID-19 happened with enough of lead time to affect the FY21 budget. Congress received the president's budget in February 2020 and has until the start of October to make targeted cuts without encountering another continuing resolution. The defense budget, however, represents the culmination of a multiyear process balancing thousands of stakeholder interests. It reflects a vast amount of information processed at every level of the military enterprise. The Pentagon's work on the FY21 budget request started nearly two years ahead of time and includes a register of funding estimates out to FY25. Moreover, defense programs are devised and approved based on life-cycle cost and schedule estimates. Cuts to a thorough plan may flip the analysis of alternatives on its head, recommending pivots to new systems or architectures and upsetting contract performance. Not only are current budgets shaped by many years of planning, but they get detailed to an almost microscopic level. For example, the Army's FY21 research, development, test and evaluation request totaled $12.8 billion, less than 2 percent of the overall Pentagon request. Yet the appropriation identifies 267 program elements decomposing into a staggering 2,883 budget program activity codes averaging less than $10 million each. Congressional staff is too small to understand the implications of many cost, schedule and technical trade-offs. To gather information on impacts, the Pentagon is thrown into a frenzy of fire drills. More draconian measures, like the FY13 sequestration, leading to indiscriminate, across-the-board cuts can sidestep hard questions but comes at a significant cost to efficiency. Targeted cuts at a strategic level, such as to the nuclear recapitalization programs and other big-ticket items, can expect stiff resistance. First, there is real concern about great power competition and the damage that may be wrought by acting on short-term impulses. Second, targeted programs and their contractors will immediately report the estimated number of job losses by district. Before measures can get passed, a coalition of congressional members negatively impacted may oppose the cuts. Resistance is intensified considering the proximity to Election Day. Budget stickiness is built into the political process. The FY22 budget is perhaps the first Pentagon budget that can start inching downward. More than likely, severe cuts aren't in the offing until FY23 or FY24 at the very earliest. That gives time for policymakers to reflect on the scale of the rebalancing between defense and other priorities. In some important ways, congressional control of the Pentagon through many thousands of budget line items restricts its own flexibility. For example, continuing resolutions lock in program funding to the previous year's level until political disagreements can be resolved. The military cannot stick to its own plans, much less start new things. If budget lines were detailed at a higher level, such as by major organization or capability area, then the Pentagon could make more trade-offs while Congress debates. Similarly, if the Pentagon had more budget flexibility, then Congress could more easily cut top lines and allow Pentagon leaders to figure out how to maximize with the constraint during the year of execution. Congress could gain the option to defer the hard questions that can make cuts politically difficult. The Space Force recently released a proposal for consolidating budget line items into higher-level capability areas. It reflects the idea that portfolio-centric management is an efficient method of handling rapid changes in technologies, requirements or financial guidance resulting from economic shocks. Until such reforms are pursued, expect defense budgets to remain sticky. Eric Lofgren is a research fellow at the Center for Government Contracting at George Mason University. He manages a blog and podcast on weapon systems acquisition. He previously served as a senior analyst at Technomics Inc., supporting the U.S. Defense Department's Cost Assessment and Program Evaluation office. https://www.defensenews.com/opinion/commentary/2020/05/26/will-defense-budgets-remain-sticky-after-the-covid-19-pandemic/

  • Black Basta-Linked Attackers Target Users with SystemBC Malware

    August 14, 2024 | International, C4ISR, Security

    Black Basta-Linked Attackers Target Users with SystemBC Malware

    Black Basta-linked campaign uses fake IT calls, AnyDesk, and SystemBC malware for credential theft and data exfiltration.

  • New defense budget bill foresees US-Israel counter-drone cooperation

    August 14, 2018 | International, Aerospace

    New defense budget bill foresees US-Israel counter-drone cooperation

    By: Seth J. Frantzman JERUSALEM — For the first time, the National Defense Authorization Act includes a section on U.S.-Israel cooperation in countering unmanned aerial systems, in the fiscal 2019 version. The cooperation will identify “capability gaps” of the U.S. and Israel in countering UAVs and seek out projects to address those gaps to strengthen U.S. and Israeli security. The new cooperation envisions funding for research and development efforts and identifying costs that foresee close cooperation modeled on previous successful programs that Israel and the U.S. have collaborated on, including missile defense and anti-tunneling initiatives. Israel and the U.S. have been at the forefront of air defense cooperation for decades. U.S. Reps. Charlie Crist and Mike Johnson introduced in February a bill titled “United States-Israel Joint Drone Detection Cooperation Act.” Parts of the bill were included in the NDAA passed in both houses of Congress in July. “I am honored to have our bill included in the NDAA and to see it signed into law by President [Donald] Trump. This is an important step not only for our strongest ally in the Middle East but for the United States as well,” Johnson said in July. The president signed the NDAA into law on the afternoon of Aug. 13. The initiative foresees “joint research and development to counter unmanned aerial vehicles [which] will serve the national security interests of the United States and Israel.” Included as Section 1272 of the final NDAA presented to the president on Aug. 3, the cooperation contains five parts, including identification of the capability gaps that exist, identifying cooperative projects that would address the gaps, assessing the costs of the research and development, and assessing the costs of procuring and fielding the capabilities developed. Reports on the cooperation will be submitted to the congressional defense committees, the Senate Foreign Relations Committee and the House Foreign Affairs Committee. The threat of drones has increased in recent years. On Feb. 10 an Iranian-made drone entered Israeli airspace near the northern town of Beit Shean. It had flown from the T4 air base in Syria. Israel identified and tracked the drone from Syria and sent an Apache helicopter to shoot it down. The drone was revealed to be armed with explosives. Former Mossad chief Danny Yatom said in an interview in April that the drone was sophisticated and “an exact replica of the U.S. drone that fell in their territory,” referring to the American RQ-170 Sentinel, which was downed in Iran in 2011. Iran developed two drones based on the Sentinel, one called Shahed 171 and an armed version dubbed Saeqeh, which debuted in 2016. In 2012, Hezbollah used a drone to try to carry out surveillance of the Dimona nuclear reactor in southern Israel. “It's not the first time and it will not be the last,” warned Hezbollah leader Hassan Nasrallah. Conflict Armament Research reported in March 2017 that kamikaze drones using Iranian technology were being used by Houthi rebels in Yemen against Saudi Arabia and the United Arab Emirates. The UAE has sought to bring attention to this threat during the conflict in Yemen, in which a Riyadh-led coalition is fighting the Houthis. Drones were also used by the Islamic State group to attack U.S.-led coalition forces in Syria and Iraq. And Afghan officials reported an Iranian drone entered their airspace in August 2017. In September 2017, Israel used a Patriot missile to down a Hezbollah drone. Israel used Patriotmissiles twice to down Syrian UAVs near the Golan Heights demilitarized zone in July 2018. The U.S. reportedly used an F-15E Eagle to shoot down an Iranian-made Shahed 129 drone in June 2017 in Syria. The drone was heading for the U.S. base at Tanf, which is located in Syria near the Jordanian border. A systematic examination of the emerging drone threat is in the works. The U.S. Defense Department has been allocating resources to counter UAVs, with U.S. Central Command requesting up to $332 million over the next five years for efforts to counter drones. The U.S. Army has been looking for new missiles to defend against a variety of threats, including drones. This will include the Expanded Mission Area Missile and may include other Israel missiles such as the Tamir interceptor for use with a multimission launcher. https://www.defensenews.com/unmanned/2018/08/13/new-defense-budget-bill-foresees-us-israel-counter-drone-cooperation/

All news