22 août 2024 | International, C4ISR, Sécurité

Chinese Hackers Exploit Zero-Day Cisco Switch Flaw to Gain System Control

Chinese hackers exploit Cisco switch vulnerability to gain system control and evade detection. Cybersecurity firm uncovers sophisticated espionage cam

https://thehackernews.com/2024/08/chinese-hackers-exploit-zero-day-cisco.html

Sur le même sujet

  • Why the British army tested robots in muddy fields

    14 janvier 2019 | International, Terrestre

    Why the British army tested robots in muddy fields

    By: Grant Turnbull Senior British army officers have signaled their intent to accelerate the fielding of several unmanned — and increasingly autonomous systems — following successful army trials at the end of 2018, but much like other forces around the world the United Kingdom faces challenges from how to modify archaic acquisition processes, to overcoming technical issues. In December, the British army concluded its landmark experimentation exercise known as Autonomous Warrior, in which the service evaluated more than 50 unmanned systems from industry over a month-long period in the south of England. The exercise, which put the robotic systems through grueling trials in muddy fields and a purpose-built facility for urban fighting, was the first attempt by the British army, as well as industry, to determine how the technology will work in a combat environment. Much like other forces around the world, the service hopes to use robots to carry out the dangerous, and often tedious, elements of combat. Over 200 troops — made up of infantry, marines, engineers, airmen as well as U.S. Army personnel — were equipped with a variety of robotic and autonomous systems with the aim of improving areas such as combat mass, soldier lethality and overall information gathering. For example, in one scenario, soldiers used robotic engineering vehicles to clear an obstacle, while a small quadcopter flew overhead to provide infrared imagery before armored infantry rolled in to take an enemy position. Robotic systems with varying levels of autonomy were a key part of the exercise, ranging from radar-equipped drones for detecting buried IEDs, to small two-wheeled robots that are thrown into buildings to search for enemy fighters. The head of the British army, Gen. Mark Carleton-Smith, has directed the Ministry of Defence (MoD) to speed up the fielding of technology used during the exercise. “His direction to me is very clear,” said Maj. Gen. Chris Tickell, director of capability for the British army. “He wants to see some of this kit in the hands of the field army in 12 to 18 months. “Success or failure will absolutely hinge on what happens after the experiment,” he added. “And that is about the exploitation and proving to industry that we are as good as our word and we are going to take some of these ideas and put them into the hands of the user.” For Tickell, an equipment budget of £22 billion ($28 billion) over the next decade will allow the MoD to purchase new unmanned technologies, but the “trick is to turn the ideas that you see here into tangible capability.” This may require the MoD “to adjust and even devise new acquisition processes to enable rapid acquisition”, said Trevor Taylor, an expert in defense acquisition at the Royal United Services Institute, a London-based think tank. “How will requirements, business cases, competitive tendering or ‘partnering,' testing and safety cases be addressed?” A related challenge continues to be the British army's lack of experience using unmanned and autonomous systems, with commanders using the Autonomous Warrior exercise to better understand capability enhancements as well as the inevitable shortfalls. The officer responsible for coordinating the exercise, Lt Col Nick Serle, told C4ISRNET that while the British army has worked with industry on new technologies it had not previously focused on robots and autonomous systems. “That's why this year we decided to spend a month on Salisbury Plain just focusing on robotics and autonomous systems,” Serle said. He also commands the British army's experimentation unit, known as the Infantry Trials and Development Unit. “This is a real opportunity to bring stuff into the field and really see if it does what industry thinks it's going to do, but also to see if military users will use it the way [industry] thinks they will use it,” Serle said. “There's no one single piece of kit that will solve all our problems, it's a combination of something in the air such as a surveillance asset, something on the ground, perhaps with a weapon on it or just doing logistics, but then it all links through an information system where you can pass that data and make better decisions to generate tempo.” An issue highlighted by Serle was an increasingly crowded radiofrequency spectrum, especially as several unmanned systems jostle for space to beam back high-resolution data from onboard sensors. “The problem is when they start cutting each other out, we are dealing with physics here, if we want to have great high definition video passing across the battlefield we need to trade somewhere else.” Taylor noted that not only will there be a need to ensure that the control systems do not interfere with each other, but also that army leaders “will have to be convinced that new systems are not simply too vulnerable to jamming and other disruptive techniques by an adversary.” A promising development from the exercise is the ability to optionally man a standard vehicle using applique kits that can be fitted within a few hours. Several examples were on display when we visited the exercise in December, including a remote-controlled Warrior infantry fighting vehicle and a lightweight MRZR tactical vehicle. As part of the experimentation, troops used the vehicles in unintended ways. One U.S. Army soldier noting that the MRZR had been a helpful surveillance tool because of its onboard camera. Squads were also keen to use the UGVs to help in entering buildings and also as modern-day pack horses to carry supplies or people. “What we have found is that when troops are using these [UGVs], naturally they just want to jump on the vehicle because it goes faster than they can, and you can move groups very quickly on them,” Serle said. He added that for safety reasons the soldiers were not allowed to hop on board during the exercise. “Optionally manned is good, but whether it needs to be optionally manned with a steering wheel and a seat I don't know, I think you could do it more like a Segway. But there's no doubt people want to get on them.” https://www.c4isrnet.com/unmanned/robotics/2019/01/11/why-the-british-army-tested-robots-in-muddy-fields/

  • U.S. Agencies Warn of Iranian Hacking Group's Ongoing Ransomware Attacks

    29 août 2024 | International, C4ISR, Sécurité

    U.S. Agencies Warn of Iranian Hacking Group's Ongoing Ransomware Attacks

    U.S. agencies warn of Iranian hackers targeting key sectors with ransomware, exploiting security flaws to breach networks.

  • Contract Awards by US Department of Defense - September 11, 2020

    14 septembre 2020 | International, Aérospatial, Naval, Terrestre, C4ISR, Sécurité

    Contract Awards by US Department of Defense - September 11, 2020

    NAVY WR Systems Ltd. Fairfax, Virginia, is awarded a $490,500,000 single award, indefinite-delivery/indefinite-quantity, performance based contract with provisions for cost-plus-fixed-fee and firm-fixed-price task orders. The contract is for maritime position, navigation and timing systems in-service engineering and technical support services. This contract includes a five-year ordering period with a total potential contract value of $490,500,000. Fiscal 2020 other procurement (Navy) funds in the amount of $25,000 will be obligated at the time of award. Funds will not expire at the end of the current fiscal year. Work will be performed in Norfolk, Virginia (98%); San Diego, California (1%); and Groton, Connecticut (1%), and is expected to be completed by September 2025. The contract was competitively procured by full and open competition via the Naval Information Warfare Command e-Commerce Central website, with two timely offers received. Naval Information Warfare Center Atlantic, Charleston, South Carolina, is the contracting activity (N65236-20-D-8024). Lockheed Martin Rotary and Mission Systems, Owego, New York, is awarded a $28,508,412 cost-plus-incentive-fee, firm-fixed-price order (N00019-20-F-0340) against basic ordering agreement N000019-19-G-0029. This order provides non-recurring and recurring engineering support associated with software and hardware development for Phase I integration of the Digital Magnetic Anomaly Detection sensor into the MH-60R aircraft. Work will be performed in Owego, New York (66%); and Montreal, Canada (34%), and is expected to be completed in October 2023. Non-Department of Defense participant funds in the amount of 3,020,159 will be obligated at time of award, none of which will expire at the end of the current fiscal year. The Naval Air Systems Command, Patuxent River, Maryland, is the contracting activity. Lockheed Martin Corp., Lockheed Martin Aeronautics Co., Fort Worth, Texas, is awarded a $9,049,721 modification (P00004) to cost-plus-fixed-fee order N00019-20-F-0571 against previously issued basic ordering agreement N00019-19-G-0008. This modification provides labor, engineering change order planning, installation and site support activities to operate the Cameri Regional Modification, Repair, Overhaul and Upgrade facility for F-35 aircraft for the government of Italy. Work will be performed in Cameri, Italy (85%); and Fort Worth, Texas (15%), and is expected to be completed by December 2020. Non-Department of Defense funds in the amount of $9,049,721 will be obligated at time of award, none of which will expire at the end of the current fiscal year. The Naval Air Systems Command, Patuxent River, Maryland, is the contracting activity. Eastern Research Group Inc., Chantilly, Virginia, is awarded an $8,997,911 cost-plus-fixed-fee bridge contract for analytical engineering and technical support services. Work will be performed in Indian Head, Maryland, and is expected to be completed by September 2021. Fiscal 2020 operations and maintenance (Navy) funding in the amount of $623,741 will be obligated at time of award and will expire at the end of the current fiscal year. This contract was not competitively procured in accordance with 10 U.S. Code 2304(c)(1); only one responsible source and no other supplies or services will satisfy agency requirements. The Naval Surface Warfare Center, Indian Head Explosive Ordnance Disposal Technology Division, Indian Head, Maryland, is the contracting activity (N00174-20-C-0012). American Apparel Inc.,* Selma, Alabama, is awarded a $7,260,212 firm-fixed-price, indefinite-delivery/indefinite-quantity contract for the purchase of up to a maximum of 70,200 marine corps tropical combat uniforms. Work will be performed in Selma, Alabama, and is expected to be complete by September 2025. Fiscal 2020 operations and maintenance (Marine Corps) funds in the amount of $1,201,631 will be obligated on the first delivery order immediately following contract award and funds will expire at the end of fiscal 2020. This contract was competitively procured via the official contract opportunities website beta.SAM.gov, with one offer received. The Marine Corps Systems Command, Quantico, Virginia, is the contracting activity (M67854-20-D-1690). ARMY Ashford Leebcor Enterprises III LLC, Williamsburg, Virginia, was awarded a $100,000,000 firm-fixed-price contract to provide maintenance and repair of real property and minor construction work for the Fort Lee military installation. Bids were solicited via the internet with eight received. Work locations and funding will be determined with each order, with an estimated completion date of Sept. 10, 2025. U.S. Army Field Directorate Office, Fort Eustis, Virginia, is the contracting activity (W91QF5-20-D-0001). Guyco Inc., Lampasas, Texas, was awarded a $65,705,000 firm-fixed-price contract for renovation of Hammerhead Barracks at Fort Hood. Bids were solicited via the internet with two received. Work will be performed at Fort Hood, Texas, with an estimated completion date of Dec. 4, 2022. Fiscal 2020 operations and maintenance (Army) funds in the amount of $65,705,000 were obligated at the time of the award. U.S. Army Corps of Engineers, Fort Worth, Texas, is the contracting activity (W9126G-20-C-0034). Lockheed Martin Corp., Owego, New York, was awarded an $18,998,690 fixed-price-incentive contract for the Modernized-Radar Frequency Interferometer. Bids were solicited via the internet with one received. Work will be performed in Owego, New York, with an estimated completion date of Feb. 28, 2023. Fiscal 2018 aircraft procurement (Army); and 2020 Foreign Military Sales (Qatar) funds in the amount of $18,998,690 were obligated at the time of the award. U.S. Army Contracting Command, Redstone Arsenal, Alabama, is the contracting activity (W58RGZ-20-F-0414). Weeks Marine Inc., Covington, Louisiana, was awarded an $18,065,000 firm-fixed-price contract for maintenance dredging of the Morehead City Harbor federal navigation channel. Bids were solicited via the internet with two received. Work will be performed in Morehead City, North Carolina, with an estimated completion date of April 30, 2021. Fiscal 2018, 2019 and 2020 civil operations and maintenance funds in the amount of $18,065,000 were obligated at the time of the award. U.S. Army Corps of Engineers, Wilmington, North Carolina, is the contracting activity (W912PM-20-C-0022). Great Lakes Dredge & Dock Co. LLC, Oak Brook, Illinois, was awarded a $15,494,310 firm-fixed-price contract for pipeline dredging and channel improvement. Bids were solicited via the internet with three received. Work will be performed in Freeport, Texas, with an estimated completion date of June 18, 2021. Fiscal 2020 civil construction and non-federal 96X8862 funds in the amount of $15,494,310 were obligated at the time of the award. U.S. Army Corps of Engineers, Galveston, Texas, is the contracting activity (W912HY-20-C-0034). SGJV LLC,* Virginia Beach, Virginia, was awarded a $14,947,159 firm-fixed-price contract for construction of a new fueling facility at Columbus Air Force Base. Bids were solicited via the internet with three received. Work will be performed in Columbus, Mississippi, with an estimated completion date of July 6, 2021. Fiscal 2020 military construction (Defense-wide) funds in the amount of $14,947,159 were obligated at the time of the award. U.S. Army Corps of Engineers, Mobile, Alabama, is the contracting activity (W91278-20-C-0027). Stantec Consulting Service Inc., Fenton, Missouri, was awarded a $12,000,000 firm-fixed-price contract for civil works design. Bids were solicited via the internet with ten received. Work locations and funding will be determined with each order, with an estimated completion date of Sept. 10, 2025. U.S. Army Corps of Engineers, St. Louis, Missouri, is the contracting activity (W912P9-20-D-0017). Raytheon Co., Marlborough, Massachusetts, was awarded a $9,842,441 modification (P00055) to contract W58RGZ-17-C-0070 for air traffic navigation integration and coordination services. Work will be performed in Marlborough, Massachusetts, with an estimated completion date of Aug. 24, 2021. No funds were obligated at the time of the award. U.S. Army Contracting Command, Redstone Arsenal, Alabama, is the contracting activity. Science Applications International Corp., Reston, Virginia, was awarded an $8,520,938 modification (000194) to contract W31P4Q-18-A-0011 for converged infrastructure engineering support for operational intelligence. Work will be performed at Fort Belvoir, Virginia, with an estimated completion date of Sept. 10, 2021. Fiscal 2020 operations and maintenance (Army) funds in the amount of $8,520,938 were obligated at the time of the award. U.S. Army Contracting Command, Redstone Arsenal, Alabama, is the contracting activity. Northrop Grumman Systems Corp., Boulder, Colorado, was awarded an $8,000,000 modification (P00094) to contract W9113M-12-C-0055 for engineering services support for the Joint Tactical Ground Station. Work will be performed in Boulder, Colorado, with an estimated completion date of Sept. 30, 2021. Fiscal 2020 research, development, test and evaluation (Army) funds in the amount of $810,000 were obligated at the time of the award. U.S. Army Contracting Command, Redstone Arsenal, Alabama, is the contracting activity. AIR FORCE Battistella S.p.A., Pordenone, Italy (FA5682-20-D-0001); Eiffage Infraestructuras SA, Sevilla, Spain (FA5682-20-D-0003); Ganter Interior GmbH, Waldkirch, Germany (FA5682-20-D-0004); and JV SKE Italy 2012, Vicenza, Italy (FA5682-20-D-0002), have collectively been awarded an estimated $96,000,000, indefinite-delivery/indefinite-quantity, multiple-award construction contract. This contract provides for a broad range of design-build, sustainment, maintenance, repair, alteration, renovation and minor construction projects to include residential and commercial work for Aviano Air Base, Italy, as well as supporting installations throughout Italy. Work will be performed primarily at Aviano Air Base, and geographically separated units in Italy and is expected to be completed by Sept. 10, 2025. This contract is the result of a competitive acquisition and 12 offers were received. Fiscal 2020 operations and maintenance funds in the amount of $2,500 are being obligated to each awardee at the time of the award. The 31st Contracting Squadron, Aviano Air Base, Italy, is the contracting activity. A-Tech Corp., doing business as Applied Technology Associates, Albuquerque, New Mexico, has been awarded a $17,663,490 other transaction prototype project agreement. The purpose of the agreement is to obtain a ground-based Directed Energy Weapon (DEW) prototype for the purpose of fixed-site Air Force Air Base Air Defense against Group 1 and Group 2 unmanned aerospace system (UAS) threats. The objective of the Directed Energy Counter-UAS prototype effort is to develop, assemble, and ultimately test a prototype DEW in an operationally relevant environment. This prototype effort will be divided into two phases, with Phase 2 being an option. Phase 1 consists of prototype design, assembly and contractor test. Work will be performed in Albuquerque, New Mexico, and is expected to be completed by Sept. 10, 2021. This award is the result of competitive procedures under the Air Force Life Cycle Management Center Consortium Initiative umbrella agreement FA8604-19-9-4050. A two-step solicitation was issued; 13 white papers and eight proposals were received. Fiscal 2019 research, development, test and evaluation (RDT&E) funds in the amount of $17,600,106; and fiscal 2020 RDT&E funds in the amount of $63,384 are being obligated at the time of award. The Air Force Life Cycle Management Center, Wright-Patterson Air Force Base, Ohio, is the contracting activity (FA8604-19-9-4050). Correction: The contract announced on Aug. 31 for General Dynamics Mission Systems, Marion, Virginia was announced with an incorrect award date, value amount and completion date. The contract was awarded Sept. 11. General Dynamics Mission Systems, Marion, Virginia, has been awarded a $17,536,820 firm-fixed-price contract for Wide Band Radomes. This contract provides for production of Wide Band Radomes supporting U.S. Air Force F-16 aircraft outfitted with Active Electronically Scanned Array (AESA) radars. Work will be performed in Marion, Virginia, and is expected to be completed by Sept. 10, 2032. This award is the result of a sole-source acquisition. Fiscal year (FY) 2018 aircraft procurement funds in the amount of $14,421,156 and FY 2020 aircraft procurement funds in the amount of $3,115,663 are being obligated at the time of award. The Air Force Life Cycle Management Center, Wright-Patterson Air Force Base, Ohio, is the contracting activity (FA8615-20-D-6067). DEFENSE LOGISTICS AGENCY Benco Dental Supply Co., Pittston, Pennsylvania, has been awarded a maximum $32,860,940 fixed-price with economic-price-adjustment, indefinite-delivery/indefinite-quantity contract for pharmaceutical products. This was a competitive acquisition with 16 offers received. This is a one-year base contract with nine one-year option periods. Location of performance is Pennsylvania, with a Sept. 10, 2021, ordering period end date. Using customers are Army, Navy, Air Force, Marine Corps and federal civilian agencies. Type of appropriation is fiscal 2020 through 2021 warstopper funds. The Defense Logistics Agency Troop Support, Philadelphia, Pennsylvania, is the contracting activity (SPE2D0-20-D-0015). General Electric Aviation, Cincinnati, Ohio, has been awarded a maximum $32,522,610 firm-fixed price, indefinite-delivery/indefinite-quantity contract to overhaul F108 engines. This was a limited source acquisition using justification 10 U.S. Code 2304 (c)(1), as stated in Federal Acquisition Regulation 6.302-1. This is a one-year base contract with four one-year option periods. Locations of performance are Ohio and Canada, with a Sept. 10, 2021, performance completion date. Using military service is Air Force. Type of appropriation is fiscal 2020 through 2021 defense appropriated funds and working capital funds. The Defense Logistics Agency Aviation, Richmond, Virginia, is the contracting activity (SPE4AX-20-D-9005). Rohr Inc., doing business as Collins Aerospace, Chula Vista, California, has been awarded a $24,100,000 modification (P00003) to five-year, firm-fixed-price contract SPE4AX-18-D-9403 with one five-year option period for additional aviation-related spare parts and related services. This modification increases the base contract from $576,000 to $24,676,000. Location of performance is California, with an April 30, 2023, performance completion date. Using military service is Air Force. Type of appropriation is fiscal 2018 through 2023 defense working capital funds. The Defense Logistics Agency Aviation, Richmond, Virginia, is the contracting activity. Navistar Defense LLC, Melrose Park, Illinois, has been awarded a maximum $12,229,316 firm-fixed-price, indefinite-delivery/indefinite-quantity contract for pneumatic wheel tires. This was a sole-source acquisition using justification 10 U.S. Code 2304 (c)(1), as stated in Federal Acquisition Regulation 6.302-1. This is a three-year contract with no option periods. Locations of performance are Illinois and Ohio, with a Sept. 11, 2023, ordering period end date. Using military service is Army. Type of appropriation is fiscal 2020 through 2023 Army working capital funds. The Defense Logistics Agency Land and Maritime, Warren, Michigan, is the contracting activity (SPRDL1-20-D-0015). DEFENSE ADVANCED RESEARCH PROJECTS AGENCY L3Harris Technologies Inc., Colorado Springs, Colorado, was awarded a $22,152,476 cost-plus-fixed-fee completion contract for a research project for the Secure Advanced Framework for Simulation and Modeling (SAFE-SiM) program. SAFE-SiM seeks to build a government owned and controlled, faster-than-real time modeling and simulation environment. This capability would enable rapid analysis supporting senior-level decisions for concept of operations development, force structure composition, resource allocation and targeted technology insertion. Work will be performed in Colorado Springs, Colorado (23%); Arlington, Texas (25%); Round Rock, Texas (18%); Camden, New Jersey (13%); Chantilly, Virginia (8%); Culver City, California (7%); and Clifton Park, New York (6%), with an expected completion date of September 2021. Fiscal 2019 research, development, test and evaluation funds in the amount of $5,275,000 are being obligated at the time of award. This contract was a competitive acquisition in which 10 offers were received. The Defense Advanced Research Agency, Arlington, Virginia, is the contracting activity (HR0011-20-C-0145). DEFENSE HEALTH AGENCY Booz Allen Hamilton, McLean, Virginia, was awarded a $9,125,494.37 firm-fixed-price contract modification exercising Option Period Four on previously awarded task order HT0011-16-F-0011 for integrated professional services across the Military Health System (MHS). The underlying task order provides professional services to allow robust performance management and continuous process improvement support to maintain the MHS as a high-reliability organization. The exercised option includes additional strategic communications services valued at $457,791.30 for this current option period and supports communication and coordination with the Military Treatment Facilities through the Office of the Chief Medical Officer (CMO). This includes maintenance of the CMO website and increased support for the CMO office coordination, in addition to more frequent pushed messages and product development. This option will render continued execution of multiple work streams inherent to this contract with 54 deliverables that will unite the Services and the Defense Health Agency together as an integrated system. Fiscal 2020 operations and maintenance funds in the amount of $9,125,494.37 are obligated at time of award. The Defense Health Agency, Falls Church, Virginia, is the contracting activity. (Awarded September 4, 2020) Optum Health Care Solutions LLC, Eden Prairie, Minnesota, was awarded an $8,489,105.00 firm-fixed-price modification to previously awarded contract HT0011-17-C-0017 for Nurse Advice Line support services. The modification provides for additional resources to support a surge in the Nurse Advice Line due to significant increases in call volumes during the months of March, April and May 2020. At the onset of the pandemic in March, the demand for healthcare outpaced the capacity of the health system resulting in a rapid influx of calls into the Nurse Advice Line. Fiscal 2020 COVID-19 funds are being obligated at the time of award. The Defense Health Agency, Falls Church, Virginia, is the contracting activity. *Small Business https://www.defense.gov/Newsroom/Contracts/Contract/Article/2345436/source/GovDelivery/

Toutes les nouvelles