28 avril 2024 | International, Sécurité

Palo Alto Networks Outlines Remediation for Critical PAN-OS Flaw Under Attack

A critical vulnerability (CVE-2024-3400) in PAN-OS could expose your systems to remote code execution attacks.

https://thehackernews.com/2024/04/palo-alto-networks-outlines-remediation.html

Sur le même sujet

  • Contract Awards by US Department of Defense - November 20, 2019

    20 novembre 2019 | International, Aérospatial, Naval, Terrestre, C4ISR, Sécurité

    Contract Awards by US Department of Defense - November 20, 2019

    DEFENSE LOGISTICS AGENCY Bell Boeing Joint Project Office, California, Maryland, has been awarded a maximum $379,377,099 firm-fixed-price requirements contract for maintenance, repair and consumable material support for the V-22 platform. This was a sole-source acquisition using justification 10 U.S. Code 2304 (c)(1), as stated in Federal Acquisition Regulation 6.302-1. This is a five-year base contract with one five-year option period. Locations of performance are Maryland, Texas and Pennsylvania, with a Nov. 20, 2024, performance completion date. Using military services are Navy, Air Force and Marine Corps. Type of appropriation is fiscal 2020 through 2025 defense working capital funds. The contracting activity is the Defense Logistics Agency Aviation, Philadelphia, Pennsylvania (SPE4AX-20-D-9401). The Boeing Co., St. Louis, Missouri, has been awarded a maximum $232,003,560 firm-fixed-price delivery order (SPRPA1-20-D-000U) against a five-year basic ordering agreement (SPRPA1-14-D-002U) for the AH64 CH47 Global Material Support Program. This was a sole-source acquisition using justification 10 U.S. Code 2304 (c)(1), as stated in Federal Acquisition Regulation 6.302-1. This is a five-year base contract with one four-year option period. Locations of performance are Missouri and Arizona, with a Nov. 18, 2024, performance completion date. Using military service is Army. Type of appropriation is fiscal 2020 through 2024 defense working capital funds. The contracting activity is the Defense Logistics Agency Aviation, Philadelphia, Pennsylvania. MOOG Inc., East Aurora, New York, has been awarded a maximum $13,658,400 firm-fixed-price, indefinite-delivery/indefinite-quantity contract for aviation pneumatic accumulators. This was a limited competitive acquisition with two offers received. This is a five-year contract with no option periods. Location of performance is New York, with a Nov. 1, 2024, performance completion date. Using military service is Army. Type of appropriation is fiscal 2020 through 2025 Army working capital funds. The contracting activity is the Defense Logistics Agency Aviation, Redstone Arsenal, Alabama (SPRRA1-20-D-0007). NAVY Lockheed Martin Corp., Rotary and Mission Systems, Orlando, Florida, is awarded a $92,205,970 firm-fixed-price modification (P00008) to a previously awarded cost-plus-fixed-fee, cost reimbursable contract (N68335-18-C-0681). This modification exercises an option to procure 34 electronic Consolidated Automated Support System (eCASS) units to include 32 for the Navy and two for the government of Kuwait. Additionally, this modification procures eCASS related equipment such as self-maintenance and test/calibration operational test program sets, calibration equipment suites/kits, rack rail kits, shore installation kits and ship installation kits in support of the Navy and the government of Kuwait. Work will be performed in Orlando, Florida, and is expected to be completed in December 2022. Fiscal 2018, 2019 and 2020 aircraft procurement (Navy); and Foreign Military Sales funds in the amount of $92,205,970 will be obligated at time of award, $641,592 of which will expire at the end of the current fiscal year. The Naval Air Warfare Center Aircraft Division, Lakehurst, New Jersey, is the contracting activity. Raytheon Missile Systems, Tucson, Arizona, is awarded an $84,769,892 fixed-price-incentive (firm target) and firm-fixed-price contract modification to previously-awarded contract N00024-19-C-5418 to exercise options in support of the fiscal 2020 Evolved Sea Sparrow Missile (ESSM) Block 2 low rate initial production (LRIP) requirements. This contract modification will procure the remaining materials in support of the ESSM FY20 LRIP Lot 3 all up rounds and spares requirements. The ESSM program is an international cooperative effort to design, develop, test and procure ESSM missiles. The ESSM provides enhanced ship defense. Work will be performed in Tucson, Arizona (50%); Richmond, Australia (6%); Raufoss, Norway (6%); Andover, Massachusetts (5%); Mississauga, Canada (4%); Ottobrunn, Germany (3%); Hengelo Ov, Netherlands (3%); Grand Rapids, Michigan (3%); San Jose, California (2%); Ottawa, Canada (2%); Aranjuez, Spain (2%); San Diego, California (2%); Koropi Attica, Greece (2%); Hopewell Junction, New York (1%); Ankara, Turkey (1%); Westlake Village, California (1%); Eight Mile Plains Brisbane, Australia (1%); Grenaa, Denmark (1%); Torrance, California (1%); Canton, New York (1%); Minneapolis, Minnesota (1%); Newmarket, Canada; Lystrup, Denmark; Milwaukie, Oregon; and Cincinnati, Ohio, are less than 1% each and make up the remaining 2%. Work is expected to be complete by June 2023. Fiscal 2020 weapons procurement (Navy) funding in the amount of $84,769,892 will be obligated at time of award and will not expire at the end of the current fiscal year. This contract modification was not competitively procured in accordance with 10 U.S. Code 2304(c)(4). The Naval Sea Systems Command, Washington, District of Columbia, is the contracting activity. Kellogg Brown and Root Services Inc., Houston, Texas, is awarded a $56,255,635 modification under a previously awarded firm-fixed-price, indefinite-delivery/indefinite-quantity contract to exercise the second option period for base operating support services at Camp Lemonnier, Djibouti. The work to be performed provides for all management and administration, public safety, galley, ordnance, air operations, fire and emergency services, bachelor quarters, housing, pest control, integrated solid waste, base support vehicles and equipment, custodial, electrical, water, wastewater, port operations, supply, morale-welfare-recreation, facilities investment and environmental services to provide base operating support services. After award of this option, the total cumulative contract value will be $188,808,738. Work will be performed at various installations in the territory of Djibouti, Africa, and other areas within Africa, and work is expected to be completed November 2020. No funds will be obligated at time of award. Fiscal 2020 operation and maintenance, (Navy), contract funds in the amount of $56,255,635 for recurring work will be obligated on individual task orders issued during the option period. The Naval Facilities Engineering Command, Europe Africa Central, Naples, Italy, is the contracting activity (N62470-17-D-4012). Lockheed Martin Rotary and Mission Systems, Manassas, Virginia, is awarded a $54,597,891 cost-plus-incentive-fee contract modification to previously awarded contract N00024-17-C-6259 to exercise and fund options for Navy equipment, production support and required long lead materials. Work will be performed in Manassas, Virginia (65%); Clearwater, Florida (32%); Syracuse, New York (2%); and Marion, Florida (1%), and is expected to be complete by September 2021. Fiscal 2020 other procurement (Navy); and 2019 shipbuilding and conversion (Navy) funding in the amount of $46,832,561 will be obligated at the time of award and will not expire at the end of the current fiscal year. The Naval Sea Systems Command, Washington Navy Yard, Washington, District of Columbia, is the contracting activity. SeaFix Inc., Saipan, Marianas Protectorate, is awarded a not-to-exceed $15,214,417 firm-fixed-price, cost-reimbursement, indefinite-delivery/indefinite-quantity contract with a four-year ordering period for Navy Watercraft Afloat Maintenance Services. This contract provides for full range of logistics support services to include maintenance and associated material management for Afloat Navy Lighterage in support of the Marine Corps Prepositioning Program and deployed forces world-wide. This contract includes one six-month option period which, if exercised, would bring the cumulative value of this contract to $18,930,294. Work will be performed outside the continental U.S. aboard Military Sealift Command Ships (98%), primarily in Guam, Saipan, Diego Garcia and South Korea; and in Jacksonville, Florida (2%). Work is expected to be completed Jan. 14, 2024. If all options are exercised, work will continue through July 14, 2024. No funds will be obligated at the time of award; funds will be obligated on individual task orders as they are issued. This contract was competitively solicited and procured via the Federal Business Opportunity website as a total HUBZone set-aside, with two offers received. The Marine Corps, Blount Island Command, Jacksonville, Florida, is the contracting activity (M67004-20-D-0002). Northrop Grumman Systems Corp., Baltimore, Maryland, is awarded a $13,046,971 modification for the firm-fixed-price portion of a previously awarded contract (M67854-19-C-0043). This modification is for the purchase of gallium nitride full rate production diminishing manufacturing sources and communications equipment group shelter integration in Lot One in support of Program Executive Officer Land Systems, Quantico, Virginia. Work will be performed in Baltimore, Maryland, and is expected to be complete by May 2, 2022. Fiscal 2020 procurement (Marine Corps) funds in the amount of $13,046,971 will be obligated at the time of award and will not expire at the end of the current fiscal year. The contract modification was not competitively procured. The base contract was prepared in accordance with Federal Acquisition Regulation 6.302-1 and 10 U.S. Code § 2304(c)(1). The Marine Corps Systems Command, Quantico, Virginia, is the contracting activity (M67854-19-C-0043). BAE Systems Jacksonville Ship Repair, Jacksonville, Florida, is awarded an $11,161,336 cost-plus-award-fee modification to previously-awarded contract N00024-16-C-2302 to exercise options for the USS Billings (LCS 15) post-shakedown availability. Post-shakedown availabilities (PSA) are accomplished within a period of approximately 10-16 weeks between the time of ship custody transfer to the Navy and the shipbuilding and conversion (Navy) funding obligation work limiting date. The PSA encompasses all of the manpower, support services, material, non-standard equipment and associated technical data and documentation required to prepare for and accomplish the PSA. The work to be performed will include correction of government-responsible trial card deficiencies, new work identified between custody transfer and the time of PSA and incorporation of approved engineering changes that were not incorporated during the construction period which are not otherwise the building yard's responsibility under the ship construction contract. Work will be performed in Jacksonville, Florida, and is expected to be completed by January 2021. Fiscal 2013 shipbuilding and conversion (Navy) funding in the amount of $1,431,018; fiscal 2020 shipbuilding and conversion (Navy) funding in the amount of $1,431,015; and fiscal 2020 other procurement (Navy) funding in the amount of $202,227 will be obligated at time of award and will not expire at the end of the current fiscal year. The Supervisor of Shipbuilding, Conversion, and Repair, Bath, Maine, is the contracting activity. Melwood Horticultural Training Center Inc., Upper Marlboro, Maryland, is awarded an $8,639,459 indefinite-delivery/indefinite-quantity (IDIQ) modification for the exercise of Option Four under an IDIQ contract for custodial services at U.S. Naval Academy complex. The work to be performed provides for custodial services such as trash removal, cleaning, vacuuming, floor cleaning and scrubbing, re-lamping, specialized cleaning of the John Paul Jones Crypt, and basketball floor installation and removal. After award of this option, the total cumulative contract value will be $41,707,319. Work will be performed in Annapolis, Maryland. This option period is from December 2019 to November 2020. No funds will be obligated at time of award. Fiscal 2020 operation and maintenance, (Navy) contract funds in the amount of $8,639,459 for recurring work will be obligated on individual task orders issued during the option period. The Naval Facilities Engineering Command, Washington, Public Works Department, Annapolis, Maryland, is the contracting activity (N40080-16-D-0303). ARMY SAF Inc.,* Akron, Ohio (W91237-20-D-0001); and A&H - AMBICA JV LLC,* Livonia, Michigan (W91237-20-D-0002), will compete for each order of the $49,000,000 firm-fixed-price contract for an indefinite-delivery contract for design-build and design-bid-build construction projects. Bids were solicited via the internet with 11 received. Work locations and funding will be determined with each order, with an estimated completion date of Nov. 18, 2024. U.S. Army Corps of Engineers, Huntington, West Virginia, is the contracting activity. SIG Sauer Inc., Newington, New Hampshire, was awarded a $10,000,000 firm-fixed-price contract for procurement of .300 Winchester Magnum Ammunition. Bids were solicited via the internet with five received. Work locations and funding will be determined with each order, with an estimated completion date of Sept. 30, 2024. U.S. Army Contracting Command, Rock Island Arsenal, Illinois, is the contracting activity (W52P1J-20-D-0003). CSRA,* Huntsville, Alabama, was awarded a $9,178,300 modification (0029 42) to contract W31P4Q-05-A-0028 for non-standard rotary wing aircraft project office systems engineering and technical assistance support services. Work will be performed in Huntsville, Alabama, with an estimated completion date of Nov. 19, 2020. Fiscal 2020 Foreign Military Sales funds in the amount of $9,178,300 were obligated at the time of the award. U.S. Army Contracting Command, Redstone Arsenal, Alabama, is the contracting activity. AIR FORCE CORRECTION: The Nov. 13, 2019, announcement of a $32,266,994 modification to ManTech International Inc., Fairfax, Virginia, exercising Option Year One to previously awarded contract FA8819-18-C-1001 for security support, included the wrong modification number. The correct modification number is P00018. *Small Business https://www.defense.gov/Newsroom/Contracts/Contract/Article/2021006/source/GovDelivery/

  • GM Defense tackling battlefield power for Marines through DIU effort

    19 juillet 2023 | International, Terrestre

    GM Defense tackling battlefield power for Marines through DIU effort

    GM Defense wants to pave the way for the U.S. Marine Corps to feel comfortable fielding an all-electric vehicle.

  • Government watchdog finds more problems with F-35’s spare parts pipeline

    26 avril 2019 | International, Aérospatial

    Government watchdog finds more problems with F-35’s spare parts pipeline

    By: Valerie Insinna WASHINGTON — Only about half of the F-35s worldwide were ready to flyduring an eight-month period in 2018, with the wait for spare parts keeping jets on the ground nearly 30 percent of the time, according to a new report by the Government Accountability Office. Over the past several years, the Defense Department has sought to improve mission capable rates by making improvements to the way it and F-35 contractor Lockheed Martin order, stockpile and repair spare parts. However, GAO's findings imply that the situation may have gotten worse. The GAO's report, released April 25, investigated how spare parts shortages impacted F-35 availability and mission capable rates in 2018, with most data gathered between a May and November sustainment contract period. “In 2017, we reported that DOD was experiencing sustainment challenges that were reducing warfighter readiness, including delays of 6 years in standing up repair capabilities for F-35 parts at its depots and significant spare parts shortages that were preventing the F-35 fleet from flying about 20 percent of the time,” GAO said in the report. “According to prime contractor data, from May through November 2018, F-35 aircraft across the fleet were unable to fly 29.7 percent of the time due to spare parts shortages,” it said. “Specifically, the F-35 supply chain does not have enough spare parts available to keep aircraft flying enough of the time necessary to meet warfighter requirements.” That lack of improvement may make it more difficult for the U.S. Air Force, Navy and Marine Corps to hit an 80 percent mission capable rate by the end of fiscal year 2019, as mandated by then-Defense Secretary Jim Mattis last fall. The military services stopped providing mission capable rates for aircraft last year, citing operational sensitivities. However, the data put forth by the GAO indicates that progress stagnated in the lead up to Mattis' order. From May to November 2018, mission capable rates — which measure how many planes possessed by a squadron can perform at least one of its missions — hovered around 50 percent for all versions of the F-35. But when GAO assessed how many planes were fully mission capable — meaning that they were ready to fulfill all of their mission sets — all variants were far from meeting the 60 percent target. Only 2 percent of F-35C carrier takeoff and landing versions hit the fully mission capable mark, with the F-35Bs slightly better at 16 percent and the F-35A at 34 percent. The GAO is skeptical that the services will be able to hit the 80 percent mission capable rate goal this year, and it is even more critical of the Defense Department's plans to fund spares in future years. The department intends to buy “only enough parts to enable about 80 percent of its aircraft to be mission-capable based on the availability of parts.” However, that planning construct will likely only yield a 70 percent mission capable rate at best, the GAO said, because it only accounts for the aircraft on the flight line and not jets that are in the depot for longer term maintenance. No silver bullet for parts shortage issues Like all complicated problems, there is no single solution for the F-35 spare parts shortage, which is driven by a number of factors. GAO indicated that the Defense Department still has “a limited capacity” to repair broken parts, creating a backlog of 4,300 parts still needing to be addressed. Between September and November, it took more than six months to fix parts that should have been repaired in a window of two to three months. The F-35's much-maligned Autonomic Logistics Information System (ALIS) was designed to be able to track parts and automate the process of generating and expediting work orders, however, GAO notes that the system still requires manual workarounds from users in order to accomplish tasks. Supply and maintenance personnel cited challenges such as “missing or corrupted electronic spare parts data,” limited automation and problems caused by ALIS's subsystems not communicating with each other properly, it said. As the F-35 is still a relatively new platform, it has taken time for the program to assess which parts have been failing more often than previously estimated — but that is an area where the Defense Department is making progress, the GAO stated. “DOD has identified specific parts shortages that are causing the greatest aircraft capability degradation, and it is developing short-term and long-term mitigation strategies to increase the quantity and reliability of these parts,” the report said. One such component is a coating used on the F-35's canopy to help it maintain its stealth characteristics, which has been found to peel off at an unexpected rate, creating a heightened demand for canopies. “To address these challenges, the program is looking for additional manufacturing sources for the canopy and is considering design changes,” the GAO stated. But — somewhat paradoxically — the F-35 has been flying for a long enough time that there is significant parts differences between the first jets that rolled off the production line to the most recently manufactured planes. The GAO found “at least 39 different part combinations across the fleet” on top of variations in software. “According to the program office, DOD spent more than $15 billion to purchase F-35 aircraft from the earliest lots of production, specifically lots 2 through 5 ... but it faces challenges in providing enough spare parts for these aircraft,” the report stated. One problem — the cannibalization of F-35 aircraft for parts — is partially user-inflicted. “From May through November 2018, F-35 squadrons cannibalized (that is, took) parts from other aircraft at rates that were more than six times greater than the services' objective,” the GAO stated. “These high rates of cannibalization mask even greater parts shortages, because personnel at F-35 squadrons are pulling parts off of other aircraft that are already unable to fly instead of waiting for new parts to be delivered through the supply chain.” During an interview this February, Lt. Col. Toby Walker, deputy commander of the 33rd Maintenance Group, told Defense News that F-35 maintainers at Eglin Air Force Base, Fla., had stopped pulling parts off a cannibalized F-35 and had seen some improvements to mission capable rates as a result. “We're not continually moving parts from one aircraft to another. We're relying on the program to provide our parts,” he said. “It was a very strategic plan to do that to increase aircraft availability by not sitting an aircraft down.” In a statement, Lockheed Martin said that it had taken key steps to improve parts availability, such as transitioning some suppliers to performance based logistics contracts that incentivize companies to meet certain targets, as well as “master repair agreements” that will allow other suppliers to make longer term investments in their production capability. “These actions are beginning to deliver results and we're forecasting additional improvement. Newer production aircraft are averaging greater than 60 percent mission capable rates, with some operational squadrons consistently at 70 percent,” the company said. “From a cost perspective, Lockheed Martin has reduced its portion of cost per aircraft per year by 15 percent since 2015. Our goal is to further reduce costs to $25,000 cost per flight hour by 2025, which is comparable to legacy aircraft while providing a generational leap in capability.” https://www.defensenews.com/air/2019/04/25/government-watchdog-finds-more-problems-with-f-35s-spare-parts-pipeline

Toutes les nouvelles