Back to news

October 9, 2024 | International, C4ISR, Security

Researchers Uncover Major Security Vulnerabilities in Industrial MMS Protocol Libraries

Multiple MMS protocol vulnerabilities expose industrial systems to remote code execution, crashes, and DoS attacks.

https://thehackernews.com/2024/10/researchers-uncover-major-security.html

On the same subject

  • Buy American: Biden sees industry pushback as allies warn of trade consequences

    November 1, 2021 | International, Aerospace, Naval, Land, C4ISR, Security

    Buy American: Biden sees industry pushback as allies warn of trade consequences

    President Biden has taken executive action to boost Buy American requirements, but not everyone is happy about it.

  • Does Japan Need to Develop a New Fighter Aircraft?

    January 13, 2021 | International, Aerospace

    Does Japan Need to Develop a New Fighter Aircraft?

    By Arnaud Sobrero The Japanese archipelago lies in a volatile region rife with historical tensions and territorial disputes. China's defense spending has increased at a double-digit rate annually for much of the past three decades. The People's Liberation Army (PLA) has drastically modernized its air capabilities with development of the J-20 fighter and the upcoming FC-31, and has demonstrated consistently assertive behavior, including airspace violations and military buildups in the South China Sea. North Korea, a nuclear power since 2006, has also shown belligerence by firing ballistic missiles into the Sea of Japan, while Russia has violated Japanese airspace on several occasions prompting Japan to scramble its F-15J fleet. Those geopolitical challenges are clearly stated in Japan's Mid Term Defense Plan and National Defense Plan Guidelines, which define Japan's long-term procurement strategy. To effectively address those security challenges, these documents claim, the Japan Air Self-Defense Force (JASDF) needs to modernize its existing fleet and significantly upgrade its capabilities. Japan's 200-plus-strong F-15J fleet, built under license by Mitsubishi Heavy Industries, has been the backbone of Japan's air superiority for close to 40 years. Nonetheless, they face some obsolescence issues that have led the Japanese defense ministry to purchase a $4.5 billion upgrade package to modernize 98 of them into a “Japan Super Interceptor” configuration equipped with better radar, avionics, and weaponry. The F-2 program, co-developed with Lockheed Martin, has been facing operational challenges and has a staggering unit cost of $170 million. Even though the last F-2 was delivered in 2011, the program faces significant obsolescence issues and will remain in service for a shorter duration than the F-15J. Given the dynamic geopolitical environment Japan finds itself in, the Japanese defense ministry is determined to fill the capability gap created by the old F-15J and the future retirement of the F-2. It has decided to purchase its first batch of 42 F-35As, destined to replace the aging F-4, followed by a second batch comprised of 63 F-35A and 42 F-35B fighters, worth $23 billion. The F-35 is a formidable addition to Japan's military apparatus: it offers stealth, excellent sensor and networking capabilities,and an ability to fuse real-time information for rapid decision-making rather than high speed and pure dogfighting capabilities. From a traditional standpoint, the F-35 scarcely represents the air superiority platform the JASDF wants to counter China's growing fleet of J-11 fighters, or even the more advanced platforms recently deployed by Beijing, such as the Su-35 or J-20. Japan has tried to acquire the F-22 from Lockheed Martin but ultimately failed to do so, given that the aircraft was not designed for export due to its sensitive technologies. The JASDF is still looking to acquire a stealthy, twin-engine, long-range air superiority fighter with a robust payload and advanced networking capabilities, which will provide Japan with a qualitative military edge over growing Chinese air capabilities. ADVERTISEMENT Beyond the requirement of modernizing JASDF's capabilities, maintaining a competitive defense industrial base has been a primary strategic goal for Japan. After the Second World War, Japan spent decades rebuilding its aerospace sector, building U.S. military aircraft under license, including the F-86, F-4, F-15, CH-47, and P-3. Building sophisticated aircraft under license has been Japan's de facto strategy to acquire new technologies and upgrade its industrial base skills. Japan has historically relied on U.S. companies to import military hardware through the Foreign Military Sales (FMS) framework. These imports have increased considerably in the last decade, its proportion of the country's total defense budget rising from 0.9 percent in 2010 to 8.9 percent in 2019 with big-ticket items like the F-35, the MV-22, and the E-2D being procured through the government-to-government route. Outside of servicing those types of equipment, tier 1 and tier 2 domestic companies have not benefited from those FMS programs. Japanese companies face restrictions on sharing some critical software intellectual property and technical data from equipment that has originated in the U.S. original. Even Japan's industrial participation in the manufacture of the F-35 has been a far cry from what the local industry had envisioned initially, when Japanese companies were seeking a larger role in the aircraft's production. Recently, in a blow to U.S. military exports, the Japanese defense ministry has decided to scrap two major programs – the Global Hawk and the Aegis Ashore – due to some price and technical issues. These developments may suggest that Japan is potentially reconsidering its engagement with the U.S. on military hardware and could utilize government funds instead for domestic development to enhance the competitiveness of its defense industrial base and, more importantly, gain full control of defense capabilities, as well as on future upgrades. According to the ministry of defense's Acquisition, Technology & Logistics Agency, Japan is looking to leverage the technologies the industry has captured through license production, as well as the development of the experimental ATD-X stealth aircraft, for the development of an indigenous fighter, known as F-X. This would represent a shift in Japan's long-term procurement strategy and could indicate that Japan is now looking to partner for the design and manufacturing of sixth-generation fighter aircraft technologies. After former Prime Minister Abe Shinzo's return to power in 2012, he stopped years of decline in defense spending by boosting investments modestly. After eight years of slow but steady increase, the Japanese defense budget stands at a record of about $51.6 billion with the FY21 budget request. In addition, the Japanese defense ministry decided to “convert” its Izumo helicopter destroyer into a small aircraft carrier capable of accommodating 12 F-35B jet fighters, which will strengthen Japan's offensive capabilities. Following the lift of the ban on defense exports, Japan had seen last year its first successful military export, with the sale of air radar systems to the Philippines. Japan would likewise welcome an opportunity to export the F-X, its future sixth-generation fighter, with the assistance of an international partner – if not to promote military ties with friendly nations, then in order to reduce the tremendous development cost. Of all the challenges the F-X program will face, its affordability will be the most pressing. The F-X program represents a clear continuation of Abe's robust defense doctrine and will further cement its legacy into Japan's long-term military modernization. By bolstering the country's domestic defense industrial base and by enabling technological transfer, the F-X program will help Japan catch up with China and Russia in the stealth fighter market. Based in Asia for more than 10 years, Arnaud Sobrero is an independent writer focused on defense technology and East Asian affairs. https://thediplomat.com/2021/01/does-japan-need-to-develop-a-new-fighter-aircraft/

  • Contract Awards by US Department of Defense - October 30, 2019

    October 30, 2019 | International, Aerospace, Naval, Land, C4ISR, Security

    Contract Awards by US Department of Defense - October 30, 2019

    NAVY CubicGATR Technologies Inc., Huntsville, Alabama, is awarded a $325,000,000 firm-fixed-price, indefinite-delivery/indefinite-quantity contract for the purchase of up to a maximum 172 Next Generation Troposcatter system manufacturing and delivery, test support, technical data delivery, logistics data delivery, training data delivery and training support, fielding support and sustainment support. Work will be performed in Huntsville, Alabama, and is expected to be complete by October 2029. Fiscal 2019 procurement (Marine Corps) funds in the amount of $28,820,220 will be obligated on the first delivery order immediately following contract award, and funds will not expire at the end of current fiscal year. This contract was competitively procured via the Federal Business Opportunities website, with two offers received. The Marine Corps Systems Command, Quantico, Virginia, is the contracting activity (M67854-20-D-2000). BAE Systems Land & Armaments LP, Sterling Heights, Michigan, is awarded a $119,938,228 modification to exercise options for the fixed-price-incentive (firm target) and firm-fixed price contract line item numbers (CLINs) 4000, 4003 and 4004 portions of a previously awarded contract (M67854-16-C-0006). This modification is for the purchase of 30 Amphibious Combat Vehicles and associated production, fielding and support costs and depot support products. Work will be performed in York, Pennsylvania (60%); Aiken, South Carolina (15%); San Jose, California (15%); Sterling Heights, Michigan (5%); and Stafford, Virginia (5%), and is expected to be completed in January 2022. Fiscal 2020 procurement (Marine Corps) funds in the amount of $119,938,228 will be obligated at the time of award, and will not expire at the end of the current fiscal year. The contract was based on full and open competition with the solicitation publicized on the Federal Business Opportunities website with five offers received. The option CLINs were included within that contract and are being exercised in accordance with Federal Acquisition Regulation 52.217-7 Option for Increased Quantity-Separately Priced Line Item. The Marine Corps Systems Command, Quantico, Virginia, is the contracting activity (M67854-16-C-0006). Northrop Grumman Systems Corporation-Marine Systems, Sunnyvale, California, is awarded a cost-plus-fixed-fee $7,542,234 contract modification (P00024) to a previously awarded contract (N00030-16-C-0015) to provide support for technical engineering services, design and development engineering, component and full scale test and evaluation engineering and tactical underwater launcher hardware production to support the development and production of the Common Missile Compartment. Work will be performed in Sunnyvale, California (55%); Ridgecrest, California (20%); Cape Canaveral, Florida (10%); Bangor, Washington (5%); Kings Bay, Georgia (5%); Barrow-In-Furness, England (2%); New London, Connecticut (1%); Quonset Point, Rhode Island (1%); and Arlington, Virginia (1%), with an expected completion date of Sept. 30, 2020. Fiscal 2019 research, development, test and evaluation funds in the amount of $315,604; and United Kingdom funding in the amount of $5,454,694 are being obligated on this award. Funds in the amount of $315,604 expire at the end of the current fiscal year. Subject to the availability of funding, fiscal 2020 research, development, test and evaluation and United Kingdom funding in the amount of $1,771,936 will be obligated on this award. Strategic Systems Programs, Washington, District of Columbia, is the contracting activity. DEFENSE LOGISTICS AGENCY Stonewin Capital LP, New York, New York, has been awarded a minimum $34,494,452 fixed-price with economic-price-adjustment contract for marine gas oil. This was a competitive acquisition with 41 responses received. This is a 60-month contract with one six-month option period. Locations of performance are New York, California, Texas and South Carolina, with an Oct. 31, 2024, performance completion date. Using customers are Army, Navy, Military Sealift Command, Coast Guard and federal civilian agencies. Type of appropriation is fiscal 2020 through 2024 defense working capital funds. The contracting activity is the Defense Logistics Agency Energy, Fort Belvoir, Virginia (SPE608-20-D-0350). AvKare Inc., Pulaski, Tennessee, has been awarded an estimated $10,600,000 firm-fixed-price requirements contract for Metformin HCL ER tablets. This was a competitive acquisition with one response received. This is a one-year base contract with four one-year option periods. Locations of performance are Tennessee, New York and Kentucky with an Oct. 28, 2020, performance completion date. Using customers are Department of Defense, Department of Veterans Affairs, Indian Health Services, and Federal Bureau of Prisons. Type of appropriation is fiscal 2020 through 2021 defense working capital funds. The contracting activity is the Defense Logistics Agency Troop Support, Philadelphia, Pennsylvania (SPE2D2-20-D-0084). AIR FORCE L‐3 Communications Vertex Aerospace LLC, Madison, Mississippi, has been awarded an estimated $30,000,000 firm-fixed‐price, indefinite‐delivery/indefinite‐quantity modification (P00019) to previously awarded contract FA8106‐17‐D‐0001 for contractor logistic support of the Air Force C‐12 fleet. Work will be performed in Madison, Mississippi; San Angelo, Texas; Okmulgee, Oklahoma; Buenos Ares, Argentina; Gaborone, Botswana; Brasilia, Brazil; Bogota, Columbia; Cairo, Egypt; Accra, Ghana; Tegucigalpa, Honduras; Budapest, Hungary; Joint Base Andrews, Maryland; Nairobi, Kenya, Rabat, Morocco; Manila, Philippines; Riyadh, Saudi Arabia; Bangkok, Thailand; Ankara, Turkey; Edwards Air Force Base, California; Holloman Air Force Base, New Mexico; Joint Base Elmendorf‐Richardson, Alaska; Oslo, Norway; and Yokota Air Base, Japan, and is expected to be completed by Dec. 31, 2020. The estimated cumulative face value of the contract is $120,000,000. Fiscal 2020 aircraft procurement funds are being used and no funds are being obligated at the time of the award. The Air Force Life Cycle Management Center, Tinker Air Force Base, Oklahoma, is the contracting activity. DEFENSE HEALTH AGENCY InteIillidyne LLC, Falls Church, Virginia, has been awarded a $27,041,715 firm-fixed-price contract to provide direct support to the Defense Health Agency (DHA) Global Service Center and the enterprise to fully support the integration of all desk side support, remote, or onsite troubleshooting, onsite information technology touch labor, network support services activity program management, network security and infrastructure assurance activities to include risk management framework support, in-room video teleconferencing support, Defense Health Headquarters site asset management and network/systems engineering, where required, into the Military Health System Joint Active Directory Management and the Military Health System Medical Community of Interest network environment systems and infrastructure. This award is the result of a sole source acquisition. This contract will have a one year period of performance, Oct. 30, 2019, to Oct, 29, 2020, with one six-month option period. This contract provides continuity of services until DHA is able to conduct a competitive award anticipated in the third quarter of fiscal 2020. This award utilizes fiscal 2020 operations and maintenance funds in the amount of $27,041,715. The Defense Health Agency, Falls Church, Virginia, is the contracting activity. ARMY Quasonix LLC,* West Chester, Ohio, was awarded a $21,736,371 firm-fixed-price contract for Quasonix telemetry transmitters in support of live fire testing. One bid was solicited via the internet with one bid received. Work locations and funding will be determined with each order, with an estimated completion date of Oct. 28, 2024. U.S. Army Contracting Command, Aberdeen Proving Ground, Maryland, is the contracting activity (W91CRB-20-D-0003). MISSILE DEFENSE AGENCY Northrop Grumman Systems Corp., Azusa, California, is being awarded a firm-fixed-price prototype award with a total value of $20,000,000 through the Missile Defense Agency's authority under 10 U.S. Code § 2371b. This prototype award was competitively solicited via publication through the Space Enterprise Consortium Other Transaction Agreement between Space and Missile Systems Center and Advanced Technology International (FA8814-18-9-0002). Twelve proposals were received. Under this award, the performer will provide the Missile Defense Agency's Hypersonic and Ballistic Tracking Space Sensor Program with prototype payload design and signal-chain processing risk reduction demonstration. The work will be performed in Azusa, California, with an estimated completion date of Oct. 31, 2020. Fiscal 2019 research, development, test and evaluation funds in the amount of $15,000,000 will be obligated at the time of award. These funds will expire at the end of the 2020 fiscal year. Missile Defense Agency, Schriever Air Force Base, Colorado, is the contracting activity (HQ0857-20-9-0003). Leidos Inc., Reston, Virginia, is being awarded a firm-fixed-price prototype award with a total value of $19,995,345 through the Missile Defense Agency's authority under 10 U.S. Code § 2371b. This prototype award was competitively solicited via publication through the Space Enterprise Consortium Other Transaction Agreement between Space and Missile Systems Center and Advanced Technology International (FA8814-18-9-0002). Twelve proposals were received. Under this award, the performer will provide the Missile Defense Agency's Hypersonic and Ballistic Tracking Space Sensor Program with prototype payload design and signal-chain processing risk reduction demonstration. The work will be performed in San Diego, California, with an estimated completion date of Oct. 31, 2020. Fiscal 2019 research, development, test and evaluation funds in the amount of $15,000,000 will be obligated at the time of award. These funds will expire at the end of the 2020 fiscal year. Missile Defense Agency, Schriever Air Force Base, Colorado, is the contracting activity (HQ0857-20-9-0002). Harris Corp., Fort Wayne, Indiana, is being awarded a firm-fixed-price prototype award with a total value of $19,994,752 through the Missile Defense Agency's authority under 10 U.S. Code § 2371b. This prototype award was competitively solicited via publication through the Space Enterprise Consortium Other Transaction Agreement between Space and Missile Systems Center and Advanced Technology International (FA8814-18-9-0002). Twelve proposals were received. Under this award, the performer will provide the Missile Defense Agency's Hypersonic and Ballistic Tracking Space Sensor Program with prototype payload design and signal-chain processing risk reduction demonstration. The work will be performed in Fort Wayne, Indiana, with an estimated completion date of Oct. 31, 2020. Fiscal 2019 research, development, test and evaluation funds in the amount of $15,000,000 will be obligated at the time of award. These funds will expire at the end of the 2020 fiscal year. Missile Defense Agency, Schriever Air Force Base, Colorado, is the contracting activity (HQ0857-20-9-0001). Raytheon Co., El Segundo, California, is being awarded a firm-fixed-price prototype award with a total value of $19,958,883 through the Missile Defense Agency's authority under 10 U.S. Code § 2371b. This prototype award was competitively solicited via publication through the Space Enterprise Consortium Other Transaction Agreement between Space and Missile Systems Center and Advanced Technology International (FA8814-18-9-0002). Twelve proposals were received. Under this award, the contractor will provide the Missile Defense Agency's Hypersonic and Ballistic Tracking Space Sensor Program with prototype payload design and signal-chain processing risk reduction demonstration. The work will be performed in El Segundo, California, with an estimated completion date of Oct. 31, 2020. Fiscal 2019 research, development, test and evaluation funds in the amount of $15,000,000 will be obligated at the time of award. These funds will expire at the end of the 2020 fiscal year. Missile Defense Agency, Schriever Air Force Base, Colorado, is the contracting activity (HQ0857-20-9-0004). *Small Business https://www.defense.gov/Newsroom/Contracts/Contract/Article/2002532/source/GovDelivery/

All news