9 juin 2024 | International, Sécurité

New PHP Vulnerability Exposes Windows Servers to Remote Code Execution

New Critical PHP Vulnerability CVE-2024-4577 allows remote code execution on Windows.

https://thehackernews.com/2024/06/new-php-vulnerability-exposes-windows.html

Sur le même sujet

  • Former Symantec boss takes over the Defense Innovation Unit

    25 septembre 2018 | International, C4ISR

    Former Symantec boss takes over the Defense Innovation Unit

    By: Aaron Mehta WASHINGTON — Michael Brown spent two decades running companies in Silicon Valley, eventually rising to CEO of Symantec, one of the largest software companies in the world, with annual revenues of $4 billion and more than 10,000 employees. On Sept. 24, he starts a new job as the next leader of the Pentagon's Defense Innovation Unit. While it comes with a much smaller budget, in the range of $40 million, it's a job Brown believes he's stepping into at a critical time. “My fundamental view is we are in a technology race. We didn't ask to be in this, but we're in it,” Brown said in an exclusive interview with Defense News. “I'm concerned that if we don't recognize that we're in a race and take appropriate action, then we let China move forward and we don't put our best foot forward in terms of leading in these key technology areas.” Brown spent the last two years as a White House presidential innovation fellow with the Pentagon, meaning he's not coming into the world of defense cold with the DIU job. During that period he met Raj Shah, the previous DIU leader, as well as Mike Griffin, the Pentagon's undersecretary of defense for research and engineering, who now will be Brown's boss. Brown also co-authored a Pentagon study on China's influence in the U.S. tech scene, an experience that has influenced his views as he prepares to take over DIU. “One of the things I carry with me is I understand the motivation of companies, CEOs, investors because I've been working with these folks my whole life,” he said of his qualifications. Created in 2015 to be the Pentagon's outreach effort to Silicon Valley, DIU — until recentlyknown as the Defense innovation Unit Experimental — has gone through several high-profile iterations. It opened offices in Austin, Texas, and Cambridge, Massachusetts, but also worked through two leaders. It went from reporting directly to the secretary of defense to the Pentagon's undersecretary of defense for research and engineering. The group has also faced questions about its future from skeptical members of Congress, and resistance inside the building. The hiring of Mike Madsen to handle the office's Washington operations is expected to ease those concerns, but Brown acknowledged he would be spending time in Washington every few weeks to shore up internal and external support. Defense Secretary Jim Mattis and Griffin wanted a leader for the agency with a large commercial background, Brown said, “because that's the community we need to access.” Brown wants to create “the ideal exchange where we have access to all the leading technologies from whatever companies we want to work with on the supply side — and on the demand side we have the effective relationships with the Pentagon, throughout the military, so we can be select about what are the most interesting problems to work on in national security that have the greatest impact.” The China problem Brown's comments on China put him in line with the broader Trump administration, whose officials have repeatedly pointed to China as a competitor, and the Mattis-led Pentagon, which has warned of risk from China both as a military competitor and in influencing American supply chains. DIU, to Brown, has a specific role to play in that race: getting the Pentagon the best commercially available technology, and hence freeing up funding to invest in the military-only capabilities, such as hypersonics, needed to check Chinese ambitions. More nebulous but just as important for Brown is a new mission for DIU: doing outreach into the commercial tech community to explain the Pentagon's views on China, and why contributing to the departments efforts are worthwhile. Or as Brown puts it, “making sure the companies in these innovation hubs are aware of the technology race that is going on, so that they're not only viewing China as an economic opportunity but also seeing the geopolitical consequences. Being part of that debate is going to be an important role for DIU.” Brown said some of DIU's top priorities will include human systems engineering, information technology, cyber or advanced computing, autonomy, and artificial intelligence. He is also ordering a look at the various processes DIU uses to see if areas can be sped up, and whether other transaction authorities are being used to their full potential. He said he did not expect a significant restructuring of the office, but one priority is getting a human resources leader and new general counsel to smooth the transition of future hires. Capt. Sean Heritage, who has been acting as DIU interim head, will return to being the Navy lead for the office. The former CEO acknowledged that his background and high-level ties to the tech community may open doors that would be otherwise be shut (Brown was reportedly forced out by Symantec's board in 2016 due to company numbers, making him the third CEO to be removed by the company in the space of four years). He also envisions working with academic institutions located near the three DIU hubs to encourage a debate on the issue. Part of DIU's role is explaining to companies why they should support the department's efforts. Silicon Valley has a reputation as being hostile to the military — a reputation that has only increased in recent months following an employee-led pullout by Google of the department's Project Maven, an effort to incorporate AI into analyzing drone footage. Brown, however, said those concerns are largely “overblown,” noting the office is already in discussions with well over 500 different tech firms. “We haven't found there's a reluctance on the part of companies developing the technologies we're interested in working with the Pentagon,” he said. “They are interested in how DIU can help make that process easier for them.” Brown thinks he is the man to make that happen. “Contrary to what a lot of folks read or talk about with government, my experience is if you have good ideas and have persistence, you can make that happen.” https://www.defensenews.com/pentagon/2018/09/24/former-symantec-boss-takes-over-the-defense-innovation-unit

  • Contract Awards by US Department of Defense - February 12, 2019

    13 février 2019 | International, Aérospatial, Naval, Terrestre, C4ISR, Sécurité, Autre défense

    Contract Awards by US Department of Defense - February 12, 2019

    AIR FORCE Tecolote Research Inc., El Segundo, California, has been awarded a $36,668,258 firm-fixed-price contract for Space and Missile Systems Center acquisition and financial support services. This contract provides the Remote Sensing Systems Directorate with a broad range of acquisition, strategic communication, and administrative capabilities to execute effective and responsive integrated program management of space-related research, development, production, sustainment, and lifecycle acquisition activities. Work will be performed in El Segundo, California, and is expected to be completed by Aug. 17, 2024. This award is the result of a competitive acquisition and six offers were received. Fiscal 2019 space procurement in the amount of $974,326; and research, development, test and evaluation funds in the amount of $5,137,759 are being obligated at the time of award. Space and Missile Systems Center Remote Sensing Systems Contracting Division, Los Angeles Air Force Base, California, is the contracting activity (FA8810-19-F-0002). Lockheed Martin Corp., Fort Worth, Texas, has been awarded a not-to-exceed $19,900,000 indefinite-delivery/indefinite-quantity contract for Advanced Turbine Technologies for Affordable Mission-Capability (ATTAM) Phase I. The mission of the ATTAM Phase I program is to develop, demonstrate and transition advanced turbine propulsion power and thermal technologies that provides improvement in affordable mission capability. Work will be performed in Fort Worth, Texas, and is expected to be completed by Feb. 12, 2027. This award is the result of a competitive acquisition and 54 offers were received. The first task order will be initially funded with fiscal 2018 research, development, test and evaluation (RDT&E) funds in the amount of $45,000; and fiscal 2019 RDT&E funds in the amount of $315,000 at the time award. Air Force Research Laboratory, Wright-Patterson Air Force Base, Ohio, is the contracting activity (FA8650-19-D-2059). AAR Manufacturing Inc., Cadillac, Michigan, has been awarded a $10,864,605 delivery order (FA8534-19-F-0023) to contract FA8519-14-D-0002 for the production of 463L cargo pallets. Work will be performed in Cadillac, Michigan, and is expected to be completed by Dec. 31, 2020. Fiscal 2017 other procurement funds in the amount of $6,345,157; and fiscal 2019 other procurement funds in the amount of $4,519,448 are being obligated at time of award. Total face value of the delivery order is $10,864,605. This delivery order brings the total cumulative face value of the contract to $181,551,615. Air Force Life Cycle Management Center, Robins Air Force Base, Georgia, is the contracting activity. 22nd Century Technologies Inc., Somerset, New Jersey, has been awarded a $8,344,625 firm-fixed-price contract to exercise Option III to support the 33rd Network Warfare Squadron (NWS) at Joint Base San Antonio, Texas, in conducting its mission of Defense Cyber Operations (DCO). The contractor will provide plans and implantation in executing the 33rd NWS managed DCO mission. Work will be performed on Joint Base San Antonio, Texas, and is expected to be completed Feb. 28, 2020. This contract is the result of a competitive acquisition and eight offers were received. Fiscal 2019 operations and maintenance funds in the amount of $8,344,625 will be obligated at the time of award. The 38th Cyberspace Engineering Installation Group, Tinker Air Force Base, Oklahoma, is the contracting activity (FA8773-15-C-0067). ARMY Tiber Creek Consulting Inc.,* Fairfax, Virginia, was awarded a $33,549,985 firm-fixed-price contract for mission essential core information system for operations and sustainment with periodic modernization life cycle phases. Bids were solicited via the internet with eight received. Work locations and funding will be determined with each order, with an estimated completion date of Feb. 7, 2024. U.S. Army Health Contracting Activity, San Antonio, Texas, is the contracting activity (W81K04-19-D-0007). Osborn Consulting / MGE Engineering / Natural System,* Bellevue, Washington, was awarded a $10,000,000 firm-fixed-price contract for miscellaneous water resource civil works engineering, design, and engineering. Bids were solicited via the internet with three received. Work locations and funding will be determined with each order, with an estimated completion date of Feb. 10, 2021. U.S. Army Corps of Engineers, Seattle, Washington, is the contracting activity (W912DW-19-D-1011). Fortis Nova A Joint Venture LLC,* Phoenix, Arizona, was awarded a $9,050,000 firm-fixed-price contract for construction of two new truck fill stands. Bids were solicited via the internet with one received. Work will be performed in Las Vegas, Nevada, with an estimated completion date of Nov. 3, 2020. Fiscal 2019 military construction funds in the amount of $9,050,000 were obligated at the time of the award. U.S. Army Corps of Engineers, Los Angeles, California, is the contracting activity (W912PL-19-C-0006). NAVY Northrop Grumman Systems Corp., Rolling Meadows, Illinois, is awarded a $27,291,319 fixed-price indefinite-delivery/indefinite-quantity contract for integration, testing, delivery, and performance as the lead systems integrator for the AN/AAQ-24 Large Aircraft Infrared Countermeasures System and the ALQ-213 Electronic Warfare Management System. These services are in support of Lot 9 and 10 P-8A production aircraft for the Navy and various Foreign Military Sales (FMS) customers, including the governments of Australia and the U.K. Work will be performed in Rolling Meadows, Illinois, and is expected to be completed in February 2021. Fiscal 2018 aircraft procurement (Navy), and FMS funds in the amount of $11,751,506 are obligated at time of award, none of which will expire at the end of the fiscal year. This contract was not competitively procured pursuant to Federal Acquisition Regulation 6.302-1. The Naval Air Warfare Center Aircraft Division, Lakehurst, New Jersey, is the contracting activity (N68335-19-D-0023). Northrop Grumman Systems Corp., St. Augustine, Florida, is awarded $16,883,718 for modification P00012 to a previously awarded firm-fixed-price, cost-plus-fixed-fee, cost-reimbursable indefinite-delivery/indefinite-quantity contract (N00019-14-D-0022). This contract modification extends the period of performance and provides depot maintenance for 44 Navy and Marine Corps Reserve F-5N/F aircraft. In addition to depot maintenance, this modification provides for aircraft inspections, repairs, overhauls, emergency repairs, modifications, engineering support and procurement of structural components required for the operation and sustainment of the F-5N/F aircraft. Work will be performed in St. Augustine, Florida (96 percent); Springville, Utah (3 percent); and Emmen, Switzerland (1 percent), and is expected to be completed in September 2019. No funds will be obligated at the time of award. Funds will be obligated on individual orders as they are issued. The Naval Air Warfare Systems Command, Patuxent River, Maryland, is the contracting activity. Moran Towing Corp., New Canaan, Connecticut, is awarded a $14,350,538 firm-fixed-price contract with reimbursable elements to support PM4 service support program for the time charter services of eight tugboats. The tugboats will be capable of ship handling, docking and undocking in the Norfolk, Virginia, harbor and surrounding waters. The contract includes a 12-month base period, three 12-month option periods, and one 11-month option which, if exercised, would bring the cumulative value of this contract to $74,005,396. Work will be in Norfolk, Virginia, and surrounding waters, and is expected to be completed by February 2020. If all options are exercised, work will continue through Jan. 31, 2024. Fiscal 2019 operations and maintenance (Navy) funds in the amount of $8,371,147 will be obligated at time of award and will expire at the end of the current fiscal year. This contract was competitively procured via the Federal Business Opportunities website, with one offer received. The United States Navy's Military Sealift Command, Norfolk, Virginia, is the contracting activity (N3220519C3503). Cardno-Amec Foster Wheeler Joint Venture, Charlottesville, Virginia, is awarded $8,440,405 for firm-fixed-price task order N6247319F4047 under an indefinite-delivery indefinite-quantity architect-engineering contract for building condition assessments at Marine Corps Base (MCB) Camp Pendleton, California; Marine Corps Air Station (MCAS) Camp Pendleton, California; Marine Corps Air Ground Combat Center Twentynine Palms, California; MCAS Miramar, California; Marine Corps Logistics Base Barstow, California; Marine Corps Recruit Depot San Diego, California; MCAS Yuma, Arizona, and MCB Camp Butler, Okinawa, Japan. Work will be performed in Oceanside, California (47 percent); Twentynine Palms, California (16 percent); Miramar, California (13 percent); Barstow, California (8 percent); San Diego, California (7 percent); Yuma, Arizona (7 percent); and Okinawa, Japan (1 percent), and is expected to be completed by February 2020. Fiscal 2019 operations and maintenance (Marine Corps) contract funds in the amount of $8,440,405 are obligated on this award and will expire at the end of the current fiscal year. One proposal was received for this task order. The Naval Facilities Engineering Command, Southwest, San Diego, California, is the contracting activity (N62473-16-D-1866). U.S. SPECIAL OPERATIONS COMMAND Raytheon Company Space and Airborne Systems, McKinney, Texas, was awarded a $15,000,000 modification (P00002) to an existing indefinite-delivery/indefinite-quantity contract (H92222-18-D-0003) with cost-plus-fixed-fee contract line items. This action increases the ceiling from $30,000,000 to $45,000,000 for Silent Knight Radar Operational Flight Program (OFP) development, field service representative support and engineering services in support of U.S. Special Operations Command (USSOCOM) fixed wing aircraft. This action completes OFP software delivery for the CV-22. Development work will continue to take place at the Raytheon facility in McKinney, Texas, and is expected to be complete by December 2021. Fiscal 2019 research, development, test and evaluation funds in the amount of $5,450,390 are being obligated at the time of award. USSOCOM Headquarters, Tampa, Florida, is the contacting activity. DEFENSE INFORMATION SYSTEMS AGENCY Artel, LLC, Herndon, Virginia, was awarded a firm-fixed-price contract modification (P00019) to exercise Option Period Four on task order GS-35F-5151H / HC101315F0009 for commercial satellite communications service. The face value of this action is $12,560,172 funded by fiscal 2019 operations and maintenance funds. The total cumulative face value of the task order is $71,314,976. Performance directly supports the U.S. Central Command Southwest Asia area of responsibility and Europe Communications Network Architecture and Contingency Support. Quotations were solicited via the General Services Administration's Federal Supply Schedule, Information Technology Schedule 70, and two quotations were received from 22 offers solicited. The period of performance for Option Period Four is Feb. 16, 2019, through Feb. 15, 2020, and there are no remaining option periods for this task order. The Defense Information Technology Organization, Scott Air Force Base, Illinois, is the contracting activity. *Small Business https://dod.defense.gov/News/Contracts/Contract-View/Article/1755709/

  • Boeing awarded $9.8B contract for Saudi F-15 support

    12 novembre 2020 | International, Aérospatial

    Boeing awarded $9.8B contract for Saudi F-15 support

    By Ed Adamczyk Nov. 11 (UPI) -- Boeing Co. was awarded a $9.8 billion contract to support F-15 fighter planes of the Royal Saudi Air Force, the U.S. Defense Department announced. The deal covers modernization and sustainment of the Saudi fleet of nearly 130 aircraft over the next five years, the Pentagon said on Tuesday. The package of upgrades includes hardware, software, interface design, development, integration, test, installation of future modifications and enhancements to the F-15 Saudi weapon system. The contract also includes an option for an additional five years beyond the inital November 2025 time period. The F-15 was first put into service as a tactical fighter plane in 1978, and is in use by the air forces of the United States, Japan, Israel, Singapore and Qatar. The newest aircraft of the Royal Saudi Air Force are the F-15SA variant, which come with wing-mounted weapons-carrying packages allowing the plane to carry and launch a wider array of new weapons configurations. The Advanced Missile and Bomb Ejection Racks, or AMBER, allow the plane to carry up to 22 AIM-120 missiles, nearly double the capability of previous F-15s. The F-15QA variant to be used by the Qatar Emiri Air Force, regarded as the most advanced current version of the plane, is based on the Saudi design. Earlier this week, the Pentagon awarded two contracts totaling $734.8 million for infrastructure and equipment for the QEAF. The larger of the two deals is a $657.2 million contract for parts and training for Qatar's F-15 program, beginning with the arrival of the first F-15QAs in 2021. https://www.upi.com/Defense-News/2020/11/11/Boeing-awarded-98B-contract-for-Saudi-F-15-support/2971605119323/

Toutes les nouvelles