9 octobre 2024 | International, C4ISR, Sécurité

Researchers Uncover Major Security Vulnerabilities in Industrial MMS Protocol Libraries

Multiple MMS protocol vulnerabilities expose industrial systems to remote code execution, crashes, and DoS attacks.

https://thehackernews.com/2024/10/researchers-uncover-major-security.html

Sur le même sujet

  • What Is The Ratio Of U.S. And Chinese Military Aircraft?

    30 juin 2020 | International, Aérospatial

    What Is The Ratio Of U.S. And Chinese Military Aircraft?

    Jen DiMascio What is the ratio of military aircraft between the U.S. and China? Jen DiMascio, Aviation Week Executive Editor, Defense and Space, responds: The U.S. military operates 13,319 aircraft—about three times as many manned aircraft as the Chinese military, which operates 4,519. But the ratio is not even across all types of aircraft, according to Aviation Week Intelligence Network (AWIN) data analysts Dan Urchick and Michael Tint. When it comes to combat aircraft, the ratio is more narrow: The U.S. operates 3,435 aircraft while China operates 1,943. For now, the U.S. has a qualitative edge—with 586 fifth-generation combat aircraft to China's 38. The U.S. possesses especially large advantages in rotary-wing aircraft (4.3:1); tankers and transports (4.8:1); and command, control, communications, computers, intelligence, surveillance and reconnaissance (C4ISR) platforms (4.1:1), according to AWIN data. https://aviationweek.com/defense-space/aircraft-propulsion/what-ratio-us-chinese-military-aircraft

  • The F-35 jet might hit full-rate production more than a year late

    22 octobre 2019 | International, Aérospatial

    The F-35 jet might hit full-rate production more than a year late

    By: Valerie Insinna WASHINGTON — The U.S. Defense Department will not clear the F-35 fighter jet for full-rate production this year, and it may even have to push that milestone as far as January 2021, the Pentagon's acquisition executive said Friday. The Pentagon had intended to make a full-rate production decision — also known as Milestone C — by the end of 2019. But because the Joint Simulation Environment continues to face delays in its own development, the Defense Department will have to defer that milestone by as many as 13 months, Under Secretary of Defense for Acquisition and Sustainment Ellen Lord told reporters during a news conference. The Joint Simulation Environment, or JSE, is needed to conduct simulated evaluations of the F-35 in a range of high-threat scenarios. “We actually had signed out of the JPO [F-35 Joint Program Office] earlier this week a program deviation report that documented expected schedule threshold breach in the Milestone C full-rate production decision of up to 13 months,” Lord said. It is unclear whether the delay will cause an increase in program costs. Although the Defense Department already buys the F-35 in large numbers, the full-rate production decision is viewed as a major show of confidence in the program's maturity. During this time, the yearly production rate is set to skyrocket from the 91 jets manufactured by Lockheed Martin in 2018 to upward of 160 by 2023. But before Lord signs off on the production decision, the F-35 must complete operational testing, the results of which will be validated by Robert Behler, the Pentagon's director of operational test and evaluation. The F-35's testing community intended to complete initial operational test and evaluation, or IOT&E, by this summer; however, the JSE is not yet complete. “We are not making as quick progress on the Joint Simulation Environment, integrating the F-35 into it. It is a critical portion of IOT&E. We work closely with Dr. Behler and DOT&E [[the office of the director of operational test and evaluation]. They are making excellent progress out on the range with the F-35, but we need to do the work in the Joint Simulation Environment,” Lord said. “We have collectively decided that we need the JSE [to be] absolutely correct before we proceed, so I will make some decisions about when that full-rate production decision will be made shortly," she added. Specifically, the Defense Department and F-35 prime contractor Lockheed Martin are lagging behind in integrating the "'F-35 In-A-Box” — the simulated model of the F-35 and its sensors and weapons — into the JSE, reported Military.com, which broke the news of the testing delay in September. Even before IO&TE formally started, the F-35 test community had noted the challenge of maintaining the planned schedule. The F-35 began operational tests in December 2018, three months after the originally scheduled start date in September. The program office maintained that its goal was to see the test phase finished by the summer of 2019. However, F-35 test director Air Force Col. Varun Puri documented concerns in a September 2018 presentation that the test phase could slip until September 2019, which could add budget pressure to the program. In a statement, Lockheed Martin expressed confidence in its ability to ramp up production over the next few years. “As Secretary Lord stated earlier today, the F-35 is performing exceptionally well for our customers and we continue to ramp up production, modernize the aircraft and improve sustainment performance,” the company said. “This year our goal is to deliver 131 aircraft and that is on track to grow to over 140 production aircraft deliveries next year. We are confident the full F-35 enterprise is prepared for full rate production and ready to meet growing customer demand.” https://www.defensenews.com/air/2019/10/18/the-f-35-may-hit-full-rate-production-more-than-a-year-late/

  • These three companies got money to prototype new ground-based radars for the US Air Force

    12 mai 2020 | International, Aérospatial

    These three companies got money to prototype new ground-based radars for the US Air Force

    Valerie Insinna Months after the Air Force gave Raytheon the axe on the Three-Dimensional Expeditionary Long-Range Radar (3DELRR) program, the service has tapped three new companies to work on next-generation ground-based radars. Lockheed Martin, Northrop Grumman and Australian firm CEA Technologies were each awarded $500,000 on May 8 for a 3DELRR rapid prototyping effort known as “SpeedDealer,” the Air Force announced Monday. 3DELRR will replace the legacy AN/TPS-75 radar used to detect and track aerial targets flying at long distances. Raytheon had beaten Northrop and Lockheed for the contract in 2017 after a protracted competition that included multiple protests over the award. After schedule delays and technical challenges mounted, the Air Force announced in January that it was concluding its work with Raytheon on the program. Instead, the service would seek out off-the-shelf options from industry that could be fielded faster. “Each award provides $500,000 for the companies to demonstrate their radar system's capabilities, maintenance concepts and radar performance against operationally-relevant targets and conditions, no later than the end of September,” the Air Force said in a statement. The service would then determine whether a prototype is ready for integration or production, with additional contracts potentially awarded by the end of 2020. Initial operational capability of a production-ready radar could occur as early as fiscal year 2024, the service said. Despite a global pandemic, the program is already moving at a fast pace. After holding an industry day in February, the Air Force released a solicitation for the 3DELRR program on March 2, said Lt. Col. Matthew Judge, materiel leader. The three companies were selected less than a month from when industry proposals were due on April 15. “We are not starting over; this is not a new development contract,” said Col. Michael Harm, 3DELRR's senior materiel leader. “Through the information presented during our industry day and received in the companies' response to the solicitation, we were able to confirm that production-ready systems can be demonstrated this year.” Judge added: “We are excited to see what these three systems can do.” Lockheed and Northrop's work will be funded under a contracting mechanism known as an “other transaction authority,” which is typically used for prototype projects. As a foreign company, CEA has been granted a Foreign Comparative Test project award, the service said in a statement. Northrop Grumman will demonstrate its solution this summer, said Mike Meaney, the company's vice president for land and maritime sensors. “We are confident that our solution meets the Air Force's needs and is the most affordable, low-risk, and validated system available,” he said. “With successful completion of test demonstrations, a hot full-rate production line and opportunities for capability growth, we are confident that the Northrop Grumman solution is uniquely positioned to fulfill the Air Force 3DELRR mission need." https://www.c4isrnet.com/industry/2020/05/11/these-three-companies-got-money-to-prototype-new-ground-based-radars-for-the-us-air-force/

Toutes les nouvelles