14 septembre 2018 | International, C4ISR

Really old computer viruses are still infecting new machines

By:

The biggest cyber threats governments and businesses face may not be the cutting edge hack from China, but a 10-year-old virus that infects a little-used computer.

Some of the most well-known viruses from the past decade are still infecting machines despite their well-documented nature, according to cyber research firms. Some viruses, such as WannaCry and Conficker, are still spreading, Sean Sullivan, a security adviser at F-Secure told Fifth Domain.

“It costs hackers nothing to keep using them,” Sullivan said.

These known vulnerabilities are still effective because older machines do not receive patches for updates, which can then infect an entire network. Hackers often bundle known hacks together because it increases their success rate with no downside, Sullivan said.

“Nothing is going to be 100 percent patched across organizations,” Sullivan, said. He described a network administrator's role as “triage.”

The 2017 WannaCry hack infected users in more than 150 countries and had an economic impact of anywhere from $4 billion to $8 billion. Although progress has been made to patch computers, WannaCry is still a top malware threat for customers, F-Stream said in a September report.

The Conficker hack targeted Windows systems and was first launched in 2008. It is reported to have cost as much as $9 billion in damage.

But much work remains. More than two-billion devices have not been patched to defend against BlueBorne, a Bluetooth vulnerability that allows an attacker to take over devices, according to the cyber protection company Armis. The devices are still vulnerable because they have not been updated or because an update does not exist, according to the company.

“Whether they're brought in by employees and contractors, or by guests using enterprise networks for temporary connectivity, these devices can expose enterprises to significant risks,” wrote Ben Seri, the vice president of research at Armis.

A previous version of this article said that two million devices have not been patched to defend against BlueBorne. It is two billion.

https://www.fifthdomain.com/industry/2018/09/13/really-old-computer-viruses-are-still-infecting-new-machines

Sur le même sujet

  • CACI Awarded $465 Million Task Order to Provide Expertise for U.S. Army C5ISR Missions

    13 mai 2020 | International, C4ISR

    CACI Awarded $465 Million Task Order to Provide Expertise for U.S. Army C5ISR Missions

    Arlington, Va. - (BUSINESS WIRE) - May 12, 2020 - CACI International Inc (NYSE: CACI) announced today that it has been awarded a five-year single-award task order, with a ceiling value of more than $465 million, by the U.S. Army Combat Capabilities Development Command's (CCDC) Command, Control, Computers, Communications, Cyber, Intelligence, Surveillance, and Reconnaissance (C5ISR) center to provide research and development on cryptographic modernization, information security, and tactical network protection. Under the task order, which the Army's Cyber Security and Information Division (CSIA) awarded under the GSA Alliant II contract vehicle, CACI will provide mission expertise to enhance cyber defense capabilities for C5ISR systems. CSIA leads the Army in cryptographic modernization, information security, and tactical network protection as a division of the Army Space and Terrestrial Communications Directorate, C5ISR Center, CCDC, U.S. Army Futures Command (AFC). CACI will provide the Army with new software-defined capabilities across the service's many modernization initiatives and research areas. For example, CACI communications and cyber experts will assist the service in protecting next-generation 5G networks, as well as enhancing the security of wireless, near-field, satellite, and other communications. CACI will also support urgent requirements for AFC's cross-functional teams, provide techniques and technologies to reduce risks for Army networks, and move innovative technologies such as artificial intelligence from the laboratory to the field. John Mengucci, CACI President and Chief Executive Officer, said, “With this new work, CACI's mission experts will support the Army's C5ISR capabilities from the desktop to outer space, and enable the service to advance critical technologies from the lab to the field.” CACI Executive Chairman and Chairman of the Board Dr. J.P. (Jack) London, said, “CACI is proud to support Army modernization to ensure it dominates any and all future battlefields.” CACI's 23,000 talented employees are vigilant in providing the unique expertise and distinctive technology that address our customers' greatest enterprise and mission challenges. Our culture of good character, innovation, and excellence drives our success and earns us recognition as a Fortune World's Most Admired Company. As a member of the Fortune 1000 Largest Companies, the Russell 1000 Index, and the S&P MidCap 400 Index, we consistently deliver strong shareholder value. Visit us at www.caci.com There are statements made herein which do not address historical facts, and therefore could be interpreted to be forward-looking statements as that term is defined in the Private Securities Litigation Reform Act of 1995. Such statements are subject to factors that could cause actual results to differ materially from anticipated results. The factors that could cause actual results to differ materially from those anticipated include, but are not limited to, the risk factors set forth in CACI's Annual Report on Form 10-K for the fiscal year ended June 30, 2019, and other such filings that CACI makes with the Securities and Exchange Commission from time to time. Any forward-looking statements should not be unduly relied upon and only speak as of the date hereof. CACI-Contract Award View source version on businesswire.com: https://www.businesswire.com/news/home/20200512005083/en/ Corporate Communications and Media: Jody Brown, Executive Vice President, Public Relations (703) 841-7801, jbrown@caci.com Investor Relations: Daniel Leckburg, Senior Vice President, Investor Relations (703) 841-7666, dleckburg@caci.com Source: CACI International Inc View source version on CACI: http://investor.caci.com/file/Index?KeyFile=403962930

  • Contract Awards by US Department of Defense - December 04, 2019

    5 décembre 2019 | International, Aérospatial, Naval, Terrestre, C4ISR, Sécurité

    Contract Awards by US Department of Defense - December 04, 2019

    ARMY Sevenson Environmental Services Inc.,* Niagara Falls, New York, was awarded a $230,000,000 firm-fixed-price contract for environmental remediation. Bids were solicited via the internet with 25 received. Work locations and funding will be determined with each order, with an estimated completion date of Dec. 3, 2024. U.S. Army Corps of Engineers, Baltimore, Maryland, is the contracting activity (W912DR-20-D-0008). CORRECTION: The contract announced on Nov. 25, 2019, for Navistar Defense LLC, Lisle, Illinois (W56HZV-20-D-0016), for two commercial Medium Tactical Vehicle Variants and spare parts contained an incorrect award amount. The correct amount is $24,529,450. NAVY L3 Technologies Inc., Insight Technology Division, Londonderry, New Hampshire, is awarded a $37,500,000 firm-fixed-price, indefinite-delivery/indefinite-quantity contract with a five-year ordering period for precision aiming lasers (PAL). This is a first-time buy for PAL. The PAL combines a range finder with a ballistics and environmental sensor/processor to provide the operator with a ballistic solution for increased likelihood of first-round hit. This procurement is in support of U.S. Special Operations Command, Visual Augmentation Systems Weapons Accessories Program. Work will be performed in Londonderry, New Hampshire, and is expected to be completed by November 2024. Fiscal 2019 other procurement (Navy) funding in the amount of $902,451 will be obligated at time of award and will not expire at the end of the current fiscal year. This contract was competitively procured via the Federal Business Opportunities website, with two offers received. The Naval Surface Warfare Center, Crane Division, Crane, Indiana, is the contracting activity (N00164-20-D-JQ56). SciTech Services Inc.,* Havre de Grace, Maryland, is awarded a $33,952,020 cost-plus-fixed-fee, indefinite-delivery/indefinite-quantity contract. This contract will provide engineering and project management support to Navy science and technology management organizations and small business innovation research/small business technology transfer program offices. Work will be performed in Patuxent River, Maryland (70%); Washington, District of Columbia (15%); Arlington, Virginia (10%); San Diego, California (2.5%); and Mechanicsburg, Pennsylvania (2.5%), and is expected to be completed in December 2024. No funds will be obligated at the time of award. Funds will be obligated on individual orders as they are issued. This contract was a small business set-aside competitively procured via an electronic request for proposal; five offers were received. The Naval Air Warfare Center Aircraft Division, Patuxent River, Maryland, is the contracting activity (N00421-20-D-0006). Raytheon Missile Systems, Tucson, Arizona, is awarded a cost-plus-fixed-fee $28,881,512 contract modification to a previously awarded contract N00024-18-C-5407 to exercise a one-year option exercise for fiscal 2020 Standard Missile-2 and Standard Missile-6 repairs and maintenance and support material. This contract combines purchases for the Navy (90%); and the government of the Kingdom of Spain (10%) under the Foreign Military Sales (FMS) program. This contract will provide for engineering and technical support, depot and intermediate level repair, maintenance and recertification of standard missiles, sections, assemblies, subassemblies, components for fiscal 2020. Work will be performed in Camden, Arkansas (68%); Tucson, Arizona (18%); Anaheim, California (11%); and San Diego, California (3%), and is expected to be complete by December 2020. Fiscal 2020 operations and maintenance (Navy) funding for $3,111,499 (90%); and FMS Spain funding for $360,000 (10%) will be obligated at time of award. Contract funds for $3,111,499 will expire at the end of the current fiscal year. The Naval Sea Systems Command, Washington, District of Columbia, is the contracting activity. *Small Business https://www.defense.gov/Newsroom/Contracts/Contract/Article/2032038/source/GovDelivery/

  • Top US Navy chief talks connecting tech, recovering from accidents

    18 août 2020 | International, Naval

    Top US Navy chief talks connecting tech, recovering from accidents

    By: David B. Larter WASHINGTON — The U.S. Navy is on the brink of what could be a major shift in how it operates, but first the service's top officer wants a plan to both field technologies that have been lagging for years and develop a path forward to add new unmanned tech to the mainstream fleet. Chief of Naval Operations Adm. Michael Gilday took on his latest role in August 2019 and has since been vocal about not just the need to field new tech, but also figuring out how it all fits together. In an exclusive July 16 interview with Defense News, the CNO talked about developing and executing his plans, as well as what it will take for the Navy to recover from a series of high-profile accidents and scandals. The interview has been edited for brevity and clarity. Congress has been asking how the Navy plans to integrate unmanned surface vessels, and whether the service is prematurely committing to them. We've got a family of unmanned systems we're working on. Undersea, we've got extra-large, large and medium unmanned underwater vehicles; on the surface we have small, medium and large unmanned surface vessels; and in the air we have a number of programs. What I've asked the N9 [warfare systems directorate] to do is come to me with a campaign plan that ties all those together with objectives at the end. I've got a bunch of horses in the race, but at some point I have to put my money down on the thoroughbred that's going to take me across the finish line so I can make an investment in a platform I have high confidence in and that I can scale. What I've found is that we didn't necessarily have the rigor that's required across a number of programs that would bring those together in a way that's driven toward objectives with milestones. If you took a look at [all the programs], where are there similarities and where are there differences? Where am I making progress in meeting conditions and meeting milestones that we can leverage in other experiments? At what point do I reach a decision point where I drop a program and double down on a program that I can accelerate? Observers have questioned whether the Navy has a concrete idea of what it wants these unmanned surface vessels to do. What's the progress on that front? The concept of operations that the fleet is working on right now will be delivered in the fall, and that talks conceptually about how we intend to employ unmanned in distributed maritime operations. The other piece of this is, what would a day-to-day laydown look like of unmanned forward? The Navy has got to be forward: For obvious reasons we don't want the fight back here; the Navy exists to operate forward. That's where we need to be in numbers. And with unmanned, if you are not there at the right time, you are irrelevant. There has to be a number of unmanned [systems] forward. I can't just decide to rally unmanned out of San Diego or in the Pacific northwest at a time when they'll be too late to need. You've talked about a “Manhattan Project” to get a reliable network to deploy overseas that can bind together all these new platforms. Where are you with that? That's a critical piece of this, and a really important point of discussion with respect to unmanned, whether that's in the air, on the sea or under the sea, is the Navy Tactical Grid. Coming into the job, the projections for the Navy Tactical Grid was for delivery in about 2035. I knew that was way, way too late. We're investing in netted weapons, netted platforms, netted headquarters — but we don't have a net. So, on a handshake with [then-Air Force Chief of Staff] Gen. [David] Goldfein, I said: “Look, I am all in, and my vision is that the Navy Tactical Grid would be the naval plug into JADC2 [Joint All-Domain Command and Control].” So the Navy Tactical Grid is a very critical piece of the unmanned campaign plan because it becomes the main artery for controlling all those unmanned platforms. Without it, I have a bunch of unmanned that I shouldn't be building because I can't control it very well. I need to put a team of the best subject matter experts that I have on the Navy Tactical Grid to deliver it here within the next few years. As part of its mark on the National Defense Authorization Act, both the House and the Senate made moves to slow down the development of the large unmanned surface vessel. They cited technical glitches with the Littoral Combat Ship program and the Ford class that have resulted in delays. Do you have concerns about slowing down that development, or is there merit to taking a slower, more iterative approach to fielding technologies? First of all, I actually agree with Congress on this. It is frustrating when you get marks on “large unmanned surface vessel” because they are concerned with the command and control of the missile systems that we could potentially put on those platforms or other systems. I go back to the campaign plan: The approach has to be deliberate. We have to make sure that the systems that are on those unmanned systems with respect to the [hull, mechanical and electrical system], that they are designed to requirement, and perform to requirement. And most importantly, are those requirements sound? I go back to: Do I really need a littoral combat ship to go 40 knots? That's going to drive the entire design of the ship, not just the engineering plant but how it's built. That becomes a critical factor. So if you take your eye off the ball with respect to requirements, you can find yourself drifting. That has to be deliberate. With respect to the systems we are putting on unmanned vessels, I'd say we absolutely learned from LCS and Ford; those have to be proven systems that are prototyped and land-based tested before we start doubling down and going into production. The littoral combat ships are quickly coming off the lines. Is the Navy prepared for them? There are things in the near term that I have to deliver, that I'm putting heat on now, and one of them is LCS. One part is sustainability and reliability. We know enough about that platform and the problems that we have that plague us with regard to reliability and sustainability, and I need them resolved. That requires a campaign plan to get after it and have it reviewed by me frequently enough so that I can be sighted on it. Those platforms have been around since 2008 — we need to get on with it. We've done five deployments since I've been on the job, we're going to ramp that up two and a half times over the next couple of years, but we have got to get after it. LCS for me is something, on my watch, I've got to get right. I also have to deliver both the mine and anti-submarine warfare modules. These ships are probably going to [start going] away in the mid-2030s if the [future frigate] FFG(X) build goes as planned. But I need to wring as much as I can out of those ships as quickly as I can. Have you seen any significant successes with the ship? I do think we have it about right with manning. We were honest with ourselves that the original design wasn't going to do it. I really like the blue-and-gold construct because I get way more [operational availability] than I would with just the single crew. So I can get these ships out there in numbers doing the low-end stuff in, let's say, 4th Fleet where I wouldn't need a DDG [destroyer]. The Navy deployed the LCS Detroit to South America — the 4th Fleet area of operations — last year on a counternarcotics mission, and it returned earlier this month. Those are the kinds of missions for which the LCS is perfectly suited. I can deploy these things with a [law enforcement detachment] and a signals intelligence capability, and I can do that on LCS with carry-on gear. It's the right kind of platform for that. Also in 5th Fleet, those maritime security missions that we were heavily sighted on in the late 1990s and early 2000s: They still exist, I'd just prefer to do them with an LCS instead of a DDG if I can. What other programs have caught your attention? In unmanned, whether it's the MQ-4C Triton [long-range surveillance drone] or the MQ-25 Stingray [carrier-based tanker drone], I've got to put heat on those. We have to get them out there in numbers, operating with a high level of confidence, so we can leverage what we learn across the rest of the unmanned build. In the wake of the Fat Leonard bribery scandal, the fatal accidents in 2017 and now the most recent fire onboard the amphibious assault ship Bonhomme Richard, there are questions about systemic issues in the Navy. What are your thoughts about that? The Pentagon and Washington, D.C., drives you to focus on things. One of things [the late Air Force Col.] John Boyd talked about was that the priorities, even in a highly technical world, need to be on people, ideas and machines in that order. The issues we've faced in the Navy over the past few years all come back to people. They all come back to culture. If I draw it to Fat Leonard or to the 2017 Comprehensive Review or the review we did with the SEALs, most of that is cultural. Ninety-five percent of it is people-focused. It really comes down to leadership. That is not lost on me. It is easy in this building not to pay attention to it, but it is on my mind, and at the fleet commander level those are the things we talk most about: people, training, attitude. It's premature to judge the outcome of the investigation into Bonhomme Richard, but what questions do you have as you look at the scale of that disaster? This is a very, very serious incident that I think will force the Navy to stand back and reevaluate itself. We've got to follow the facts. We've got to be honest with ourselves and we've got to get after it. My intention, once the investigations are done, is to make this available for the public to debate, including what we need to do to get after any systemic problems that we might have. But one of things I did on the Sunday [after the fire broke out] was I read the report of the Miami fire back in 2012. That was the last mass conflagration in a shipyard environment that we had. There were a number of recommendations coming out of that incident. One of the questions I have is: Did we fully and adequately implement those recommendations? Because that fire was probably the most recent similar mass conflagration we've had. We learned from that. When we completed the investigation, did we just leave it in the rearview mirror, or did we — no kidding — take it seriously? https://www.defensenews.com/naval/2020/08/17/top-us-navy-chief-talks-connecting-tech-recovering-from-accidents/

Toutes les nouvelles