29 décembre 2024 | International, C4ISR, Sécurité

Apache MINA CVE-2024-52046: CVSS 10.0 Flaw Enables RCE via Unsafe Serialization

Critical Apache MINA flaw CVE-2024-52046 with CVSS 10.0 enables RCE via serialization flaws. Patch required.

https://thehackernews.com/2024/12/apache-mina-cve-2024-52046-cvss-100.html

Sur le même sujet

  • Innovation Road Show: US Navy Seeks Acquisition Solutions from Small Businesses

    26 mars 2019 | International, Naval

    Innovation Road Show: US Navy Seeks Acquisition Solutions from Small Businesses

    By Warren Duffie Jr., Office of Naval Research Public Affairs ARLINGTON, Va. (NNS) -- In an effort to establish new connections with innovative small businesses and research companies—and reach these players where they live and work—the U.S. Navy will host a trio of outreach events on April 8-11 in Lowell, Massachusetts. The Navy will hold the events through its Small Business Innovation Research (SBIR) and Small Business Technology Transfer (STTR) programs, both located at the Office of Naval Research. SBIR provides the Navy with groundbreaking technology created by small firms—while STTR transitions products developed by both small businesses and research institutions to the Navy and Marine Corps. This year's events will spotlight New England's regional technology corridor, known for its prominent academic institutions, research centers, laboratories and science- and defense-focused companies. “Outreach events like these help foster collaboration to enhance the innovation network and pipeline, and accelerate the delivery of needed technologies to the Navy and Marine Corps,” said SBIR Director Bob Smith. “It's part of a new naval effort to deliver capabilities to warfighters faster by expanding relationships with regional technology hubs. This year, New England is the first stop.” The three events are: Partnering Summit—This is a setting where the naval acquisition community, government, industry and research organizations can meet to discuss naval priorities, share best practices and learn about partnership opportunities with SBIR and STTR. Monday, April 8, and Tuesday, April 9, at the UMass Lowell Inn & Conference Center. Learn more at https://www.onlineregistrationcenter.com/SBIRSTTR. Navy Forum for SBIR/STTR Transition (FST)—FST is an annual innovation marketplace matching Navy needs with small business-technology solutions. Attendees can see 133 exhibits from 107 vendors; engage in one-on-one meetings; listen to Tech Talks; and sit in on sessions hosted by congressional and Department of Defense leaders. Wednesday, April 10, and Thursday, April 11, at the Tsongas Center at UMass Lowell. Learn more at https://navyfst.com/. Accelerated Delivery and Acquisition of Prototype Technologies (ADAPT) Workshop—ADAPT is a new approach to match non-traditional small businesses with naval needs and quick research-and-development funding. This half-day workshop will feature technology briefs on pre-released areas of interest from a Navy shipyard; discussion about the proposal process and contracting; and opportunities for face-to-face conversations with subject matter experts. Wednesday, April 10, from 8 a.m. to noon. UMass Lowell Inn & Conference Center. Learn more at https://www.onlineregistrationcenter.com/ADAPT. https://www.navy.mil/submit/display.asp?story_id=108981

  • Sink Feeling: The Navy's 7 Big Problems (One Is the F-35)

    14 janvier 2019 | International, Aérospatial, Naval

    Sink Feeling: The Navy's 7 Big Problems (One Is the F-35)

    by Michael Peck “The Navy continues to struggle with rebuilding the readiness of the existing fleet due to enduring maintenance and manning challenges,” the report finds. “As the Navy seeks to expand its fleet by 25 percent, these challenges will likely be further exacerbated and the Navy will likely face additional affordability challenges.” The Navy must fix the teething troubles of a new and complicated aircraft that lacks sufficient spare parts: in 2017, only 15 percent of Marine F-35Bs were rated fully mission-capable. “The Navy and the Marine Corps may have to decide whether they are willing to accept less reliable and maintainable aircraft than originally planned,” GAO warned. How can the U.S. Navy buy more ships and planes when it can't maintain the ones it has? That's the question posed by a new Government Accountability Office report . “The Navy continues to struggle with rebuilding the readiness of the existing fleet due to enduring maintenance and manning challenges,” the report finds. “As the Navy seeks to expand its fleet by 25 percent, these challenges will likely be further exacerbated and the Navy will likely face additional affordability challenges.” Auditors point to seven problems that GAO, Congress's watchdog agency, have highlighted over the past several years, but which have yet to solved: Training: After a series of embarrassing collisions at sea in 2017, which led to fears that Navy has forgotten basic ship-handling skills, training was revamped along with fewer waivers for required training. Still, “while the Navy has demonstrated its commitment to ensuring that crews are certified prior to deploying, training for amphibious operations and higher-level collective training may not be fully implemented for several years.” Maintenance backlogs: Between 2012 and 2018, only 30 percent of maintenance was completed on schedule. In particular, most Navy attack submarines have suffered maintenance delays. The backlog is caused by insufficient capacity in public shipyards as well as shortages of shipyard workers. Overworked sailors: In 2017, GAO concluded that the Navy was underestimating how many sailors were needed to man ships, leading to undersized crews and overworked sailors. The Navy says it is aiming for surface ships based overseas to have a minimum of 95 percent of their complement, but GAO auditors who interviewed crews in Japan were told that “the Navy's methods for tracking fit and fill do not account for sailor experience and may be inaccurately capturing the actual presence of sailors onboard and available for duty on its ships. Moreover, sailors consistently told us that ship workload has not decreased, and it is still extremely challenging to complete all required workload while getting enough sleep.” Unrealistic budgeting: The Navy wants to boost the number of ships by 25 percent, and is planning to buy 301 new ships between now and 2048 as well as extending the life of older destroyers and submarines. But GAO and the Congressional Budget Office have calculated that the Navy “has consistently and significantly underestimated the cost and timeframes for delivering new ships to the fleet. For example, the Navy estimates that buying the new ships specified in the fiscal year 2019 plan would cost $631 billion over 30 years while the Congressional Budget Office has estimated that those new ships would cost $801 billion—a difference of 27 percent.” Aging aircraft: Numerous aircraft models across the Navy, Air Force and Marine Corps have been plagued by low availability rates due to aging aircraft, lack of spare parts for older planes, and too few mechanics. Too few pilots: The shortage of Marine Corps fighter pilots quadrupled to 24 percent between 2006 and 2017, while the Navy has been scrambling to fill pilot vacancies. “Further compounding their pilot shortages, we also found that the services have not recently reevaluated squadron requirements to reflect an increased fighter pilot workload,” said GAO. “As a result, the reported shortage actually could be greater.” The F-35: The Navy must fix the teething troubles of a new and complicated aircraft that lacks sufficient spare parts: in 2017, only 15 percent of Marine F-35Bs were rated fully mission-capable. “The Navy and the Marine Corps may have to decide whether they are willing to accept less reliable and maintainable aircraft than originally planned,” GAO warned. Michael Peck is a contributing writer for the National Interest. He can be found on Twitter and Facebook. https://nationalinterest.org/blog/buzz/sink-feeling-navys-7-big-problems-one-f-35-41502

  • Leonardo, Siemens sign deal to create cybersecurity platform

    7 avril 2023 | International, C4ISR

    Leonardo, Siemens sign deal to create cybersecurity platform

    Leonardo and Siemens on Thursday said they signed a memorandum of understanding to offer cybersecurity solutions for infrastructure in the energy, oil and gas and industrial sectors.

Toutes les nouvelles