14 novembre 2024 | International, C4ISR, Sécurité

Google Warns of Rising Cloaking Scams, AI-Driven Fraud, and Crypto Schemes

Google exposes cloaking scams targeting users with fake sites and AI-driven fraud, bolstering defenses with real-time scam detection.

https://thehackernews.com/2024/11/google-warns-of-rising-cloaking-scams.html

Sur le même sujet

  • How the Army is modernizing the old, introducing the new

    13 septembre 2019 | International, C4ISR

    How the Army is modernizing the old, introducing the new

    By: Mark Pomerleau Maj. Gen. Randy Taylor led the Army's sustainment efforts for the past two years as leader of Communications-Electronics Command at Aberdeen Proving Ground, Maryland. CECOM works to repair, restore and maintain all the Army's communications, electronics, cyber and intelligence equipment once it's been used by soldiers. In June, Maj. Gen. Mitchell Kilgo took over Taylor's position at CECOM and Taylor departed for U.S. Strategic Command. Before he left, Taylor spoke with C4ISRNET staff reporter Mark Pomerleau. C4ISRNET: You are leaving CECOM this summer after two years. What's changed? MAJ. GEN. RANDY TAYLOR: Fifty-five to 70 percent of, not just time, but expense is in sustainment. Every dollar that we don't use appropriately on the sustainment side takes a dollar away from [new programs]. One simple, but not glamorous thing that has made a tremendous impact is just making sure that — when it comes to sustaining C5ISR on the battlefield — the parts we need are at the right place at the right time. We've gone from, no kidding, like 77 percent supply availability with these parts two years ago to now this year we are currently at 90 percent and we're going to finish this fiscal year at 93 percent supply availability. Transformational. In our world, a part — the piece of a complicated platform or just the mission command system — might be the difference between it working or not, between somebody fighting or winning or not ... living or dying. C4ISRNET: Are you using any emerging technologies to get those parts in the right place at the right time? TAYLOR: We're looking at these platforms that already have built-in sensors and built-in discipline of really getting that feedback on usage, on wear and sustainment demand. We're starting there when it comes to applying AI to sustainment. I see C5ISR being a natural progression of that, but not the best place to start because even though things are becoming more and more connected, a lot of this is still very disparate networks, the disparate ability to monitor usage and age, etc. C4ISRNET: What about using AI with the network? TAYLOR: That's incredibly interesting because it is so tempting for us as an institution to go out and modernize the network by buying the latest and greatest, spiral develop it — field a different capability set every two years and get all this new stuff and all the varieties between different units and this piece of network gear and that piece of network gear and then forget about sustainment in our hubris or excitement to modernize. Then this all comes crashing down a couple years from now because we didn't have the demand history to know how to start the parts, train the technicians, and different units have different equipment. Organically, we just haven't prepared ourselves to take all that on. So, on the new modernized network, we have a mnemonic device to help remember this: Five-three-one. Starting with five: that is acquire these new C5ISR capabilities with a five-year warranty from the manufacturer. Even though that doesn't sound exciting, it is very significant. Most of the time this stuff just comes with a one-year warranty. And these warranties cost money and every dollar a program manager spends on a warranty is one less dollar he can put toward a quantity increase. That five-year warranty gives us the lead time we need as an Army and at CECOM; it gives us lead time so by year three — that's the three in five-three-one — the Army makes a decision to keep or kill. Basically, to sustain or not the thing we just modernized. Some of it we'll kill by saying, “Okay, that technology is perishable, Moore's Law. We want to replace it with the next best thing so why sustain it?” Or we might say, “It's low cost; it's essentially disposable.” C4ISRNET: Is that a new approach from years past? TAYLOR: Absolutely. Institutionally, we do a terrible job deciding to end things. We have a tendency to perpetuate indefinitely until there's some kind of compelling decision point that forces us to that. We're not really designed now to think about it that deliberately, that early. So, we're working with Army Futures Command, who can help lead that decision-making. And then — if the Army decides to sustain it, keep it past its warranty period ... five years in most cases — we have to decide, okay, then who's going to sustain it? Most of that will be sustained by CECOM. Then we have to work out a plan to transition it over to sustainment. C4ISRNET: Does that change how the network will look? TAYLOR: The network writ large, for as long as this discussion is relevant, will consist of new parts and old parts. Modernized network cross-functional team parts and legacy? That's already in the field that will be out there in some form. The biggest thing on an enterprise level that's keeping the rates from being higher is the fact that a large amount of what is fielded in the network has never gone back to the depot for reset, repair, overall, anything like that. When you pick that apart, the reason it hasn't gone back is we've made it, in the past, too hard to get it back to the depot. It's taken too long. All of the legacy radios. All of the WIN-T components to include Point-of-Presence and Soldier Network Extension, radars, generators, night-vision devices ... Back under the [Army Force Generation] model when we had about six months to reset, this was alright. But still, people didn't turn their stuff in. Nobody wanted to be without their equipment for six months because we were taking all of six months and then some at the depot to turn this thing and send it back to them. We've since completely changed that. C4ISRNET: How so? TAYLOR: Now, the C5ISR units can bring in basically all their major C5ISR platforms, turn them all in and then almost immediately drive away with something that's been totally refurbished. We've started already to do that in partnership with Forces Command, which gives us the priorities. We've seen a big spike in turning this stuff around, which really helps improve operational readiness. At the same time, we're doing all that. We made great strides in something we call “repair cycle time.” Take something like a Satellite Transportable Terminal. We used to take over six months to turn an STT to overhaul it, send it back. We do that now in less than two months. But units don't even have to wait that long because they have a repair cycle flow. Everything is accelerated now so that we can better modernize the old, introduce the new and keep this capable as we go forward. C4ISRNET: What kinds of challenges are ahead in software? TAYLOR: A big challenge with software is intellectual property. It used to be the way we looked at intellectual property rights is we kind of saw it as a binary decision. The government either bought it or we didn't. Most times we didn't because it was very expensive to buy it ... They developed it, they give us capabilities we contracted for, but they own the inner workings of it. Same thing on the hardware side. We have someone build a platform, they give us a platform, but they don't give all the engineering diagrams and all the specs on how to build the subcomponents. But we found we were at these very vulnerable points where something became obsolete, meaning we had a part on a platform and then, for example, the manufacturer stopped making it because there was no business case or maybe a sub vendor went out of business, and now we had to manufacture it organically or hire someone else, but we didn't have the intellectual property. So, it took forever to re-engineer it. C4ISRNET: And the same with software? TAYLOR: Same thing on the software side. We didn't have the code and it would just be too expensive then to try to figure it out on our own. What we do now is we have an agreement saying if any of these trigger events occur in the future, I'm going to have rights to this intellectual property you developed. I, the government, will have rights, and it's going to be at a pre-negotiated price. And what we're going to do to protect each one of us here is we're going to hold your intellectual property with a third, neutral party that will hold your software. You'll be required to update it, keep it current, they will protect it from the government or any competitor seeing it until these trigger events occur and then I will pay you for what I need when I need it. That is a brand-new way of doing business. It's been in practice a little bit in industry but not in the Department of Defense. C4ISRNET: That's important if a new radar signature comes up and you need to make a quick change. TAYLOR: Absolutely. Anything. The threat environment changes, you've got to get in there. C4ISRNET: What about software licenses? TAYLOR: If you look at the trend of how software sustainment was going, before we did a big course correction, we were approaching the point theoretically where all our sustainment dollars would go to software and [we would] have nothing left for the hardware. We got that under control now. A big part of that rebalancing is reducing the licensing cost. It first started with getting to fewer baselines because it kind of got away from us in the surge and in the war years. We had so many different versions of different software and different platforms. So, we worked with the [program executive offices] and consolidated that down to the minimum feasible number of baselines. We've also negotiated some better enterprise licenses and there have been some efficiencies there. Right now, on the sustainment side, the folks that go in and make these modifications for the government, we're going from what was 43 contracts now being reduced to 34 sustainment contracts. That's still a lot but that's a huge inefficiency there. https://www.c4isrnet.com/opinion/2019/09/12/how-the-army-is-modernizing-the-old-introducing-the-new

  • Gh0st RAT Trojan Targets Chinese Windows Users via Fake Chrome Site

    29 juillet 2024 | International, C4ISR, Sécurité

    Gh0st RAT Trojan Targets Chinese Windows Users via Fake Chrome Site

    Gh0st RAT delivered via evasive Gh0stGambit in drive-by downloads, targeting Chinese-speaking Windows users with fake Chrome installers.

  • Here’s how a CR could hurt America’s nuclear weapons modernization

    13 novembre 2019 | International, Aérospatial, Naval, Terrestre

    Here’s how a CR could hurt America’s nuclear weapons modernization

    By: Aaron Mehta WASHINGTON — A long-term continuing resolution will result in delays for modernizing America's nuclear warheads, while putting at risk an already challenging plan to build plutonium pits needed for the next generation of U.S. intercontinental ballistic missiles, nuclear officials are warning. The National Nuclear Security Administration is a semiautonomous agency under the Department of Energy that handles the manufacturing and maintenance of America's nuclear warheads. Like other government agencies, NNSA would be limited to fiscal 2019 funding limits under a continuing resolution, and it would be unable to start new contracts. The current continuing resolution, or CR, is set to end Nov. 21, but there is little expectation that regular budgeting will then resume. Congress is debating the merits of pushing the CR through December, but analysts are concerned the CR could extend into next year. “We are in a situation right now where we have single-point failures throughout our enterprise,” Lisa Gordon-Hagerty, the NNSA administrator, said during a Defense Writers Group breakfast earlier this month. “It's necessary for us, for the NNSA and for the nuclear security enterprise to receive consistent and robust funding to modernize our infrastructure as well as continue ongoing operations.” “We're looking at where we can move funding insofar as CRs will allow us to do so,” she added. “We're working very closely with OMB and the administration to see what we can do to continue our important programs to modernize the infrastructure as well as the stockpile and our workforce initiatives and our endeavors.” Gordon-Hagerty did not go into detail about specific CR-related worries, but according to an NNSA source, the agency has identified three main areas of concern under a longer CR. The first is, broadly, keeping the warhead modernization efforts on schedule. Two of those modernization programs — the B61-12 gravity bomb and W88 submarine-launched ballistic missile warhead — already face program delays thanks to an issue with a commercial part that has to be redesigned. Gordon-Hagerty said a CR should not impact that particular issue, as the funding for a solution is coming from a realignment of other warhead modernization programs. But a delay to one program caused by a CR “does affect all of the other modernization programs and all of the other work that we have ongoing throughout our nuclear security enterprise,” she said. The second major area of concern is the surplus plutonium disposition program, which is supposed to dispose of 34 metric tons of excess plutonium at a South Carolina facility. That program emerged as the successor to the controversial MOX program, and has faced opposition from South Carolina Sen. Lindsey Graham. Construction on that facility could be delayed under a CR. The NNSA source said that the agency requested extra funding for the surplus plutonium disposition program through the budget anomaly process, but was not given the resources it requested. The third area of concern is a 10-year plan to develop a native plutonium pit in the United States. The NNSA has been charged with producing 80 plutonium pits a year by 2030, a target that Gordon-Hagerty acknowledged is a tight window for the agency to hit, even with stable funding. “We are again rebalancing, looking at our budget across the entire enterprise to see what it is we need to do to meet the scope and schedule of that 2030,” she said. “Am I confident we can get there? Yes. Is it fraught with — probably a bad way of saying it — land mines? It is.” Construction costs Construction featuring prominently on this list should not be a huge surprise; NNSA officials are quick to point out in public events that they are still using some buildings that date back to the Manhattan Project. According to Gordon-Hagerty, more than 50 percent of NNSA facilities are more than 40 years old, and over a third of those are about 70 years of age. The looming CR extension comes as the agency launches a number of construction projects, and a CR could lead to major delays in standing up those facilities. While that's an issue for every agency under a CR, the NNSA is concerned that the specialty construction talent needed to build those facilities may not available if a contract is frozen and then picked up again later. There could also be high-dollar costs. Responding to a lawsuit by environmental groups trying to halt the construction of the Y-12 facility in Tennessee, NNSA said a six- to 12-month delay in construction at that location could result in almost $1 billion in extra costs for taxpayers and the agency may have to lay off 1,000 construction personnel. Those numbers, first reported by the Exchange Monitor, likely have resonance with other potential delays at construction sites caused by a CR — meaning construction delays at one or more sites could quickly become costly for an agency whose facilities and construction needs have traditionally been underfunded. “It's been on schedule and on budget for the last six years. It will be finished in 2025 for approximately $6.5 billion,” Gordon-Hagerty said of the Y-12 facility. “If that funding somehow fails to materialize, then we've got over 1,000 crafts [personnel] working at the site right now. Crafts personnel are hard to come by, especially those that are qualified. So if they see a question about funding or funding gets pulled back, they're going to find positions elsewhere.” https://www.defensenews.com/smr/nuclear-arsenal/2019/11/12/heres-how-a-cr-could-hurt-americas-nuclear-weapons-modernization/

Toutes les nouvelles