25 juillet 2024 | International, C4ISR, Sécurité

Researchers Reveal ConfusedFunction Vulnerability in Google Cloud Platform

Tenable discloses a vulnerability in Google Cloud Functions, allowing unauthorized access to sensitive data and services

https://thehackernews.com/2024/07/experts-expose-confusedfunction.html

Sur le même sujet

  • What the defense industry is seeing and saying about the election

    3 novembre 2020 | International, Aérospatial, Naval, Terrestre, C4ISR, Sécurité

    What the defense industry is seeing and saying about the election

    By: Joe Gould WASHINGTON ― Anyone will tell you this is the most important election in U.S. history ― unless they happen to run a major American defense firm. In earnings call after earnings call, defense industry executives projected calm ahead of Tuesday's election, mainly because they see the coronavirus pandemic carrying greater uncertainty (especially for firms with commercial aviation businesses). But another reason is that, despite wide projections of flat 2021 defense budgets no matter who controls the White House, industry is confident in the Pentagon's commitment to modernization. “We continue to believe that bipartisan support for defense spending will endure and that our portfolio is well-aligned to support our National Defense Strategy,” Northrop Grumman CEO Kathy Warden said in remarks typical of third-quarter earnings calls last week. “While we plan for various budget scenarios, defense spending is largely threat-driven and today's threat environment warrants a strong defense. Emerging threats are intensifying, and we believe both political parties are committed to effectively countering these threats.” If defense firms are upbeat, then Wall Street seems skeptical, with pure-play defense firms down this year and lagging the stock market, said Capital Alpha Partners' aerospace and defense analyst Byron Callan. Partisan gridlock, he noted, is what led to the budget caps that bedeviled federal budgeting for the last decade. “You could argue that some of this underperformance is related to concerns about what the election's outcome could be. Even if the president wins, no one's predicting the House will flip, and then you'll still have gridlock in Congress,” Callan said. “Let's say there's a 50-50 split in the Senate. Things can get pretty sporty.” Defense executives were comfortable making warm predictions about 2021, but the lack of comment about 2022 and 2023 was telling, said Callan. Also, Pentagon officials have warned they will have to tap modernization and readiness funds if Congress does not appropriate about $10 billion for defense contractors' coronavirus-related expenses. So why didn't any CEOs use their earnings calls to amplify that message? “That was one of the dogs that didn't bark here. Either industry doesn't see it as an issue, or that it's inevitable it's not going to happen," Callan said. With Democrats readying to debate steep defense cuts if they sweep the election, the expectation is that swollen national deficits ― driven by pandemic aid and Republican-led tax cuts ― will pressure the defense budget downward. But industry is banking on Washington's drive to prepare militarily for a rising China, a disruptive Russia and an unpredictable North Korea. “Whether it's flat with a little bit of rise or flat with a little bit of fall may depend on the election, but I think that's a fairly narrow space you're working in politically, given the deficit and the threat vectors,” Bill Lynn, the CEO of defense and aerospace conglomerate Leonardo DRS, said in an interview. Lynn is a former deputy defense secretary and Raytheon lobbyist. Though there's been speculation Democrats would cut defense spending, former vice president Joe Biden, who is running against Republican President Donald Trump, would face pressure not to for economic and political reasons, said Michael Herson, president and chief executive at American Defense International, a defense lobbying firm. (Biden has said, if elected, he doesn't foresee major defense cuts.) “The first thing that Biden's going to worry about is COVID and the economic recovery,” Herson said in an interview. “So do you really want to touch defense spending, and add to your economic woes ― because it increases unemployment ― in the first year of your presidency?” Defense Secretary Mark Esper has warned that a flat budget will force the armed services to make budgetary trade-offs and likely cuts to legacy programs. But the Pentagon has also communicated a commitment to modernization, and that's part of industry's confidence. In September, Northrop won a $13.3 billion award for the Ground Based Strategic Deterrent program, the U.S. Air Force's effort to replace the LGM-30G Minuteman III intercontinental ballistic missile. But some Democrats have attempted to defund it, and investors grilled executives about the program's post-election survival prospects ― and those of Northrop's B-21 Raider. Warden, Northrop's CEO, argued the nuclear triad becomes more of a budgetary priority when conventional military forces are under pressure. “So we're confident that a new administration would recognize that value and continue to support the modernization efforts that are well underway for both GBSD and B-21,” she said. The Pentagon over recent years has oriented itself toward technological competition with China, with related investments in artificial intelligence, next-generation networks, cybersecurity and space. Companies did not see signs of that momentum reversing. “The government doesn't pivot on a dime,” Booz Allen Hamilton's chief financial officer, Lloyd Howell Jr., told investors. “And a lot of the programs that we currently support ... are increasingly tied to their missions, which is politically agnostic.” The CEO of infrared imaging maker FLIR Systems, Jim Cannon, acknowledged there will be “top-line pressure on the budget ... no matter what happens with the election,” but he put stock in Army leaders' assurances that the service must remedy long-underfunded modernization efforts. “The message that was sent out to industry loud and clear is that, after four decades largely without significant modernization transformation, now is the time,” Cannon said. “And if we look at the priorities that we're aligned against and the work that we've been doing for the past two years, we think we're well positioned there. But look: I agree there's a lot of uncertainty, a lot of work yet for us to do, but that's our perspective right now.” When asked, L3Harris downplayed how a drawdown from Afghanistan ― which Trump and Biden both favor ― or hypothetical cuts to end strength would impact the sales of radios or night vision goggles. “We're not even 40 percent through the modernization ramp with radio. So even if end strength comes down, as I expect it likely will, I don't think it's going to affect the growth rate in our radio business,” said CEO Bill Brown, arguing that night vision goggles and radios had “under-penetrated the force.” “So if anything, reduced end strength might actually free up some dollars to be put onto modernization investments that really affect a broad part of our business,” he added. Executives at companies without a stake in a specific major platform had a good story to tell, and several pointed to investments in cybersecurity or artificial intelligence. Leonardo DRS' Lynn said the firm's investments in communications, sensors and computing systems had made it “ambidextrous." "We can go in any direction,” he said. “The larger companies have greater exposure across the breadth of the defense budget. We're more in targeted areas and haven't got broad exposure. “We're in Army sensors, satellite communications; we're in 10 or 12 segments. We can be targeted, and frankly in a flat budget environment, that ability to target's important to grow at all.” https://www.defensenews.com/congress/2020/11/02/what-the-defense-industry-is-seeing-and-saying-about-the-election/

  • ‘Red Air’ providers prep for a big year of war games

    14 janvier 2020 | International, Aérospatial

    ‘Red Air’ providers prep for a big year of war games

    By: Valerie Insinna WASHINGTON — Last year, the Air Force tapped seven defense companies for a $6.4 billion opportunity for “Red Air” training where contracted pilots pose as aggressors in air-to-air combat. With the fiscal 2020 budget finally approved, those firms are hungry to hear for more information about when and where they start flying. The companies — Air USA Inc., Airborne Tactical Advantage Company (ATAC), Blue Air Training, Coastal Defense, Draken International, Tactical Air Support and Top Aces Corp. — currently find themselves waiting for the next phase of the competition, when the Air Force will issue individual work orders for a total of 22 bases that will allow contractors to begin flying this year. “I think we've all watched the Air Force program develop over the last two years kind of in awe at the size of it and the ambition, the commitment they're making to have enough adversaries out there to challenge their pilots,” said Russ Bartlett, CEO of Textron Airborne Solutions, which is the parent company of ATAC. “That's great for industry, because the Air Force knows they need to do that.” Unlike major programs for weapon systems, which have a dedicated line item in the budget, the work orders for adversary air services will be paid out of the operations and maintenance account, which is more flexible. While the Air Force's FY20 budget request flags a $151 million increase for “contract air training,” it's unclear how much of that amount will ultimately be set aside for that adversary air services. It will be up to Air Combat Command “to decide how much money they're going to put against the adversary air budget. So we're really just waiting to figure out how that all works,” said Russ Quinn, president of Top Aces. “We and the program office are looking very forward to hearing how Air Combat Command is planning on funding the contract.” Draken International is already conducting aggressor flights at Nellis Air Force Base, Nev., as part of a five-year contract awarded in 2018. That work is helping the company keep its Red Air planes ready ahead of work at other bases, said Sean Gustafson, Draken's vice president of business development. "We're flying 6,000 to 7,000 hours a year out there right now,” he said. “We're excited for the task orders to come out shortly, looking to expand and set up operations on the East Coast and then supporting those bases.” The Draken pilots, who currently fly the Aero Vodochody L-159E Honey Badger and Douglas A-4 Skyhawk, regularly deploy from Nellis AFB and visit other installations, including Hill AFB in Utah, Eglin AFB in Fla., and Holloman AFB in N.M. The company will begin adding Mirage F1s to the mix next month, Gustafson said. “We're very excited about that, because that will be the first radar-equipped, supersonic aircraft in the industry. We have the first three [of 24 total] going out there in February,” he said. The company has also purchased 12 radar- equipped, supersonic Atlas Cheetah fighters that will help cover Air Force requirements outside of Nellis. Meanwhile, the other companies are doing training and modifications necessary to get their aggressor fleets ready to fly whenever the U.S. Air Force decides it needs those planes. Top Aces has purchased 29 used F-16s from an undisclosed user specifically for the Air Force's adversary air contract. Those aircraft are not yet in the United States, but Quinn is confident that the company will have the aircraft in hand in early spring, he said. After that, Top Aces will begin modifying each jet with an open architecture system that will allow the company to more easily outfit the aircraft with a range of radar, sensors, electronic warfare pods or other technologies that increase the capability of Red Air forces, he said. Depending on whether the company wins a contract with Germany for adversary air services, it may also have excess capacity with its Douglas A-4N Skyhawk fleet, which it could also offer to help supplement the U.S. Air Force's needs, Quinn said. ATAC plans to use its new fleet of Mirage F1 jets to meet the Air Force's requirements. So far, the company has fully trained one F1 pilot, who flew the first ATAC Mirage in August. Another two pilots were set to begin training in December, Bartlett said late last year. “On the airplane side, we're in really good shape. Sixty-three airplanes is a huge win for us. There are a lot of economies of scale that we intend to capitalize on,” he said. “The challenge is going to be — of course — hiring and retaining pilots. The services are trying keep their pilots and grow their pilot cadres; the airlines are hiring aggressively and paying lucrative salaries, and this industry is growing by leaps and bounds with just this Air Force program.” So far, recruiting pilots has not been a problem for Draken, Gustafson said. The company has employed 52 aggressor pilots to meet the demands of its contract with Nellis, and has a “stack of resumes” from pilots that jobs as the company expands to other bases. “We're doing well on [hiring],” he said. “Some folks, they don't want to go to the airlines. They recently retired from the military and they want to keep flying fighters.” The company is looking to grow its fleet with new aircraft, as well, he added. “We should have some pretty exciting news about five to six months from now,” he said. https://www.defensenews.com/air/2020/01/13/red-air-providers-prep-for-a-big-year

  • Boeing and Etihad Broaden Sustainability Alliance by Testing Innovations on ecoDemonstrator 787

    22 juillet 2020 | International, Aérospatial

    Boeing and Etihad Broaden Sustainability Alliance by Testing Innovations on ecoDemonstrator 787

    Seattle, July 20, 2020 /PRNewswire/ - Boeing [NYSE:BA] and Etihad Airways will use a 787-10 Dreamliner to test ways to reduce emissions and noise as part of the aerospace company's ecoDemonstrator program before the airline accepts delivery of the airplane this fall. The collaboration, which includes extensive sound measurement testing with industry partners, builds on a strategic sustainability alliance Boeing and Etihad formed in November 2019. "This is the latest program under Etihad's industry-leading strategic partnership with Boeing, focusing on innovating real-world solutions to the key sustainability challenges facing the aviation industry," Etihad Aviation Group Chief Executive Officer Tony Douglas said. "The ecoDemonstrator program is founded on innovation and sustainability — and these are core values for Etihad Airways, Abu Dhabi and the United Arab Emirates. Etihad and Boeing see a great opportunity to collaborate and share knowledge to minimize the impact of aviation on the environment." The ecoDemonstrator program utilizes commercial aircraft to test technologies that can make aviation safer and more sustainable now and into the future. The 2020 program, which will begin testing in August, is the first to use a Boeing 787-10. "Industry collaboration is a key aspect of Boeing's ecoDemonstrator program that enables us to accelerate innovation," said Stan Deal, Boeing Commercial Airplanes president and CEO. "We're proud to broaden our sustainability partnership with Etihad Airways by testing promising technologies that can reduce emissions, help commercial aviation meet our climate goals, and allow the industry to grow in a responsible manner that respects our planet and its natural resources." Boeing and Etihad will work with industry-leading partners, including NASA and Safran Landing Systems, to conduct aircraft noise measurements from sensors on the airplane and the ground. The data will be used to validate aircraft noise prediction processes and the sound reduction potential of aircraft designs, including landing gear, that are modified for quieter operations. In addition, a flight will be conducted during which pilots, air traffic controllers and an airline's operations center will simultaneously share digital information to optimize routing efficiency and enhance safety by reducing workload and radio frequency congestion. Test flights will be flown on a blend of sustainable fuel, which significantly lowers aviation's environmental footprint. The testing program is expected to last about four weeks before Etihad enters its Boeing 787-10 into service. Contact Saffana Michael Boeing Communications saffana.michael2@boeing.com Mobile: +97150 4590651 Paul McElroy Boeing Communications paul.mcelroy2@boeing.com Mobile: +1 425-283-7740 SOURCE Boeing View source version on Boeing Newsroom: https://boeing.mediaroom.com/2020-07-20-Boeing-and-Etihad-Broaden-Sustainability-Alliance-by-Testing-Innovations-on-ecoDemonstrator-787

Toutes les nouvelles