Russian Hackers Exploit New NTLM Flaw to Deploy RAT Malware via Phishing Emails

Sur le même sujet

• 

  17 novembre 2020 | International, C4ISR

  Spanish Army selected Elbit Systems to supply software-defined radios

  Seth J. Frantzman JERUSALEM — Israeli firm Elbit Systems will provide E-LynX software-defined radios to the Spanish Army after the service awarded a contract to Elbit's partner Telefonica, according to a report in Spain confirmed by Elbit. Elbit said it could not refer directly to the contract's details, but a company spokesperson did say in a statement: “We do acknowledge the media report that the Spanish Ministry of Defense selected the E-Lynx Software Defined Radio in handheld and vehicular configurations as the solution for the Spanish Army.” According to the Nov. 10 report by Infodefensa, the contract was awarded in October by the General Directorate for Armament and Material for €6.5 million (U.S. $7.7 million). “Telefonica explained in a presentation that a part of the components of the E-Lynx radio will be produced and integrated in Spain by the company with the support of other companies such as Aicox, while other equipment will come from Elbit's facilities in Israel,” the report read. Aicox is a telecommunications and technology company in Spain. The contract award comes after other recent orders of Elbit radios in Germany, Sweden and Switzerland. In July 2020, the Swedish Army chose Elbit to supply 1,000 additional systems after an initial contract in 2018. In October 2019, Switzerland's Federal Office for Defence Procurement ordered the same radio for the country's military. In June 2019, the German Defence Ministry chose Elbit's subsidiary in the country to provide the radios in hand-held and vehicular configurations for platoons and company levels of the Army. Local manufacturing of the radios would facilitate “further extensions and capabilities,” the company said at the time. The popularity in software-defined radios has attracted the attention of other Israeli companies, such as Rafael Advanced Defense Systems, which has been competing in Europe and sees opportunities across the continent. In Spain, Rafael teamed with Technobit for the Spanish Army contract. The Spanish program required industry competitors partner with a local company. Spain's procurement will take place in phases, with the initial contract for a battalion. Estimates by the Israeli companies put the overall program at hundreds of millions of dollars. This multistep process is common in other European countries, such as Sweden's program. The trend in procurement for software-defined radios will increase the ability of countries and units to effectively speak to each other, a challenge that Lt. Gen. Ben Hodges, former commander of the U.S Army in Europe, referenced in 2019 when he noted that NATO allies “cannot even talk to each other securely.” Getting tactical radio communications to the next level is an issue militaries have been trying to solve, the U.S. Army said last year. On Nov. 12, Elbit announced the launch of its E-LynxX-Sat, a satellite communications add-on system that uses a terminal to interface with the E-LynX software-defined radio. The E-LynX radio facilitates “advanced networking solutions in both open field and in urban areas,” the company said. “The E-LynX family of radio systems is designed with an open architecture approach, features unique waveforms and enables the adoption with a range of additional European and NATO waveforms.” The SATCOM add-on will enable infantry and maneuvering forces to maintain secure voice and data communications over ranges of “hundreds of kilometers,” the company said. The system was demonstrated during a British Army Warfighting Experiment. https://www.c4isrnet.com/industry/2020/11/16/spanish-army-selected-elbit-systems-to-supply-software-defined-radios/

• 

  20 avril 2018 | International, Naval

  Why the Navy wants more of these hard-to-find software developers

  By: Mark Pomerleau With a relative dearth of cyber expertise in the military, Congress mandated last year the services begin direct commissioning pilot programs. The Navy, however has been doing direct commissioning for highly skilled software engineers for a few years, albeit on a small scale. The cyber warfare engineer (CWE) program is a highly competitive program with officers on five year rotations performing software or tool development for cyber operators. CWEs serve as members of the cyber mission force, the Navy's cyber mission force teams that serve as the cyber warriors for U.S. Cyber Command, producing cyber tools, but can also conduct target analysis, vulnerability research, and counter-measure development against malicious cyber activities. Since 2011, the Navy has only recruited 25 of these commissioned officers to its ranks. “Twenty-five developers in the Navy as military officers is definitely not enough,” Lt. Christopher Liu, the most senior cyber warfare engineer told Fifth Domain in an interview at the Navy League's Sea Air Space conference April 9. With a relative dearth of cyber expertise in the military, Congress mandated last year the services begin direct commissioning pilot programs. The Navy, however has been doing direct commissioning for highly skilled software engineers for a few years, albeit on a small scale. The cyber warfare engineer (CWE) program is a highly competitive program with officers on five year rotations performing software or tool development for cyber operators. CWEs serve as members of the cyber mission force, the Navy's cyber mission force teams that serve as the cyber warriors for U.S. Cyber Command, producing cyber tools, but can also conduct target analysis, vulnerability research, and counter-measure development against malicious cyber activities. Since 2011, the Navy has only recruited 25 of these commissioned officers to its ranks. “Twenty-five developers in the Navy as military officers is definitely not enough,” Lt. Christopher Liu, the most senior cyber warfare engineer told Fifth Domain in an interview at the Navy League's Sea Air Space conference April 9. “We definitely need to increase the billets and increase the amount that we can hire ... to have more talents to be able to work on the cyber mission,” he said. “As soon as the number increases, we'll be able to expand the program rather than just five years to eight years, hopefully make it into a 20 year career so people can get trained up and work on missions and not be forced into different fields.” The Pentagon has been besieged by concerns about the DoD's ability to both retain and attract cyber talent among its ranks when similar jobs in the private sector pay significantly more. Vice Adm. Michael Gilday, commander of 10th Fleet/Fleet Cyber Command, acknowledged in recent congressional testimony that the military is not competitive with the private sector and noted that the base pay for the CWE position is around $37,000 a year. “That's what we pay somebody to answer the phones around here,” Senator Claire McCaskill, responded to Gilday interrupting him in frustration. “We're asking them to have incredible expertise. That seems to me totally unrealistic.” Some current CWEs feel the work they're doing inside the Navy has greater meaning than similar work they did in the private sector. “I find that this is a lot more fulfilling,” Ensign Jordan Acedera, the most junior CWE told Fifth Domain. “You finish a project, you're given something that's a lot more challenging and that really tests you.” For Lt. (j.g.) George John, who was formerly writing software at a stock trading company, work with the CWE provides a better environment that's not driven so much by profit margins and hitting quarterly revenue targets. “We don't have to worry about profitability or bringing to market,” he said. “We can pursue a little more ... what's possible. Throw stuff against the wall, see what sticks, take our time to figure out a plan of action.” One of the biggest challenges, however, is lack of knowledge of the program, even inside the Navy. “You still walk across captains and commander who say 'CWE, what in god's name is that,” John said. With more CWE personnel in the force, the Navy could build a more informed and skilled software engineering cadre, the group said. “There's tons of software. Everybody has some type of software pet project,” John said. “To be able to get more CWEs on those things and coordinate with one another and say here's what [Consolidated Afloat Networks and Enterprise Services] is doing with their communications and their infrastructure. How are we doing that differently on the base side? You can talk and address security concerns with one another. Just within the cyber operations realm, Liu said, as the headcount increases, the CWEs could work on the requirements the operational community within the cyber mission force rather than having to prioritize projects. They could even start to look at developing capability prior to a specific requirement coming in as a means of staying ahead of the game as opposed to waiting for and reacting on requirements from operators. https://www.defensenews.com/digital-show-dailies/navy-league/2018/04/11/why-the-navy-wants-more-of-these-hard-to-find-software-developers/

• 

  7 janvier 2019 | International, Aérospatial, C4ISR

  Pentagon Seeks a List of Ethical Principles for Using AI in War

  BY PATRICK TUCKER An advisory board is drafting guidelines that may help shape worldwide norms for military artificial intelligence — and woo Silicon Valley to defense work. U.S. defense officials have asked the Defense Innovation Board for a set of ethical principles in the use of artificial intelligence in warfare. The principles are intended to guide a military whose interest in AI is accelerating — witness the new Joint Artificial Intelligence Center — and to reassure potential partners in Silicon Valley about how their AI products will be used. Today, the primary document laying out what the military can and can't do with AI is a 2012 doctrine that says a human being must have veto power over any action an autonomous system might take in combat. It's brief, just four pages, and doesn't touch on any of the uses of AI for decision support, predictive analytics, etc. where players like Google, Microsoft, Amazon, and others are making fast strides in commercial environments. “AI scientists have expressed concern about how DoD intends to use artificial intelligence. While the DoD has a policy on the role of autonomy in weapons, it currently lacks a broader policy on how it will use artificial intelligence across the broad range of military missions,” said Paul Scharre, the author of Army of None: Autonomous Weapons and the Future of War. Josh Marcuse, executive director of the Defense Innovation Board, said crafting these principles will help the department “safely and responsibly” employ new technologies. “I think it's important when dealing with a field that's emergent to think through all the ramifications,” he said. The Board, a group of Silicon Valley corporate and thought leaders chaired by former Google and Alphabet chairman Eric Schmidt, will make the list public at its June meeting. Defense Department leaders will take them under consideration. Marcuse believes that the Pentagon can be a leader not just in employing AI but in establishing guidelines for safe use — just as the military pioneered safety standards for aviation. “The Department of Defense should lead in this area as we have with other technologies in the past. I want to make sure the department is not just leading in developing AI for military purposes but also in developing ethics to use AI in military purposes,” he says. The effort, in part, is a response to what happened with the military's Project Maven, the Pentagon's flagship AI project with Google as its partner. The effort applied artificial intelligence to the vast store of video and and image footage that the Defense Department gathers to guide airstrikes. Defense officials emphasized repeatedly that the AI was intended only to cut down the workload of human analysts. But they also acknowledged that the ultimate goal was to help the military do what it does better, which sometimes means finding and killing humans. An employee revolt ensued at Google. Employees resigned en masse and the company said that they wouldn't renew the contract. Scharre, who leads the Technology and National Security Program at the Center for a New American Security, said, “One of the challenges for things like Project Maven, which uses AItechnology to process drone video feeds, is that some scientists expressed concern about where the technology may be heading. A public set of AI principles will help clarify DoD's intentions regarding artificial intelligence.” Full artcile: https://www.defenseone.com/technology/2019/01/pentagon-seeks-list-ethical-principles-using-ai-war/153940/