9 avril 2024 | International, Sécurité

Critical Flaws Leave 92,000 D-Link NAS Devices Vulnerable to Malware Attacks

Hackers are exploiting vulnerabilities (CVE-2024-3272 and CVE-2024-3273) in D-Link NAS devices. Up to 92,000 devices affected.

https://thehackernews.com/2024/04/critical-flaws-leave-92000-d-link-nas.html

Sur le même sujet

  • Cyberwarriors need a training platform, and fast

    11 juin 2018 | International, C4ISR

    Cyberwarriors need a training platform, and fast

    By: Mark Pomerleau U.S. Cyber Command's cyber teams are now built and transitioning to readiness, and now the force needs a dedicated platform to conduct training. Given the importance of properly preparing cyberwarriors, the Army (acting as Cyber Command's executive agent for all the service's cyber teams) has been using a rapid acquisition approach called other transaction authorities to field a training platform. The Persistent Cyber Training Environment, or PCTE, is not a single entity, but rather a complex system of systems that will require many moving parts for individual and collective training, as well as mission rehearsal. According to Jim Keffer, director of cyber at Lockheed Martin, it will be more than just a cyber range. It'll require event management; scheduling for training exercises; scenario design features; control of the exercises; assessments; red forces; library of capabilities that can be linked to designing adversary network mock-ups (which will require good intelligence); and classrooms to put all this together. The reason such a high-end training environment is being fast-tracked is because cyberwarriors don't currently have anything akin to what traditional war fighters use to prepare for combat. Capstone cyber exercises that only occur once or twice a year are not enough for the force, and in many cases the first-time cyberwarriors will engage with an adversary in the real world and not in simulations. “It's like a fighter pilot going up and the first time he's flown actual combat is against a real adversary,” Keffer told Fifth Domain. “That's not a good way to fight wars. That's not a good way to train your troops. That's not a good way to decrease the risk to your forces.” Incremental approach The overall PCTE is made up of a number of cyber investment challenges, or CICs, that the Army is releasing incrementally and will eventually string together. This will “bring together some of the best technology that's out there” to address immediate needs in various categories as the longer-term vision of what PCTE might look like coalesces, Deon Viergutz, vice president of Cyber Solutions at Lockheed Martin, told Fifth Domain in an interview. The Army will release five CIC's to get multiple industry approaches as it heads up the full PCTE indefinite delivery/indefinite quantity contract, Viergutz said, adding, “I believe that is still under work, the long term for PCTE and the acquisition.” While CIC one has been awarded, CIC two should be awarded in the next few weeks. According to contracting documents, CIC two is focused on enabling user access to the PCTE and training aids through a portal. CIC three, which is forthcoming in mid- to late-June, is focused on red team planning, as well as master exercise control. CIC four, estimated for release in July, will focus on training assessment. There is no information released yet regarding CIC five. One important question remains unclear, however: In the end, who will be the integrator of systems — the government or a contractor? “The seams between all these capabilities tend to be the weak points. Having an integrator to kind of tie all that together — the ranges and all these different capabilities — would be important to make sure that the cyberwarriors get the best capability that they deserve ... as quickly as possible,” Keffer said. “If the government wants to be the integrator, we'll do all we can to help them out. If they want industry to be the integrator, industry has a lot of experience doing that, especially Lockheed Martin; we're big in the training business.” https://www.fifthdomain.com/dod/2018/06/04/cyberwarriors-need-a-training-platform-and-fast/

  • Surface force lays out tech development timeline for industry

    7 mars 2023 | International, Naval

    Surface force lays out tech development timeline for industry

    The surface fleet is clear on what capabilities it will develop in the next three five-year budgeting periods, even as future force plans are under review.

  • Korea Aerospace Industries taps another European missile supplier

    20 février 2024 | International, Terrestre

    Korea Aerospace Industries taps another European missile supplier

    Germany's Diehl Defence is in line to integrate its Iris-T interceptor missile into the Korean vendor's combat aircraft.

Toutes les nouvelles