18 juillet 2024 | International, C4ISR, Sécurité

SAP AI Core Vulnerabilities Expose Customer Data to Cyber Attacks

Discover how SAP AI Core vulnerabilities could expose customer data and lead to supply chain attacks. Learn about the 'SAPwned' flaws and their impact

https://thehackernews.com/2024/07/sap-ai-core-vulnerabilities-expose.html

Sur le même sujet

  • Thales posts higher profit, tackles weak telecom satellite market
  • Kratos Targets Ground System ‘Revolution’

    18 août 2020 | International, Terrestre, C4ISR

    Kratos Targets Ground System ‘Revolution’

    We think that p-LEO is a big deal. And there's got to be a revolution that has to hit the ground segment, says Phil Carrai, president of Kratos's space, training and cyber division. By THERESA HITCHENSon August 17, 2020 at 1:20 PM WASHINGTON: As DoD and commercial industry scramble to develop small satellite constellations in Low Earth Orbit for everything from high-speed communications to near-real time Earth observation, Kratos is quietly working to solidify a central role providing the new ground systems required to make them work. While there is enormous military and commercial interest in the proliferation of small LEO satellites, known as p-LEO, not nearly as much attention has been paid to the radically different ground-based infrastructure to support those constellations. But the necessary changes in ground architecture will be monumental, and extremely lucrative for those companies at the crest of that wave. “We think that p-LEO is a big deal. And there's got to be a revolution that has to hit the ground segment,” says Phil Carrai, president of Kratos' space, training and cyber division. “We think this is kind of our play for the next many years. ... We've been making some substantial investments in that, in the sense of taking what was analog and stovepiped and moving it into a digital, dynamic, cloud infrastructure.” Kratos, headquartered in San Diego, is a mid-tier company with $750- to $800 million in annual revenue, and is perhaps best known in the defense arena right now for its low-cost attritable drones. Its XQ-58A Valkyrie is one of the top contenders for the Air Force's high-profile Skyborg program to build autonomous drones that can mate with piloted aircraft for a variety of missions; it also is providing an airframe, based on its Mako UTAP-22, as a subcontractor to Dynetics in DARPA's Gremlins program to develop drone swarms. But space-related work is the firm's bread and butter. Kratos' space, training and cyber Division is the company's biggest, Carrai said, with a large, but often behind-the-scenes, footprint in both the military and commercial satellite communications markets. Indeed, while Valkyrie's role in the Air Force's Advanced Battle Management System (ABMS), which is developing new technologies to support command and control of future all-domain operations, has been well documented, Kratos space-related comms systems and ground equipment are actually playing a bigger part as subsystems within many other company's offerings, company officials explained in a teleconference with Breaking D. “Our space portfolio really is all about communications and the ground segment, if you will, so that's been our heritage,” Carrai said. “Probably 90 percent of US satellite missions use our technology in one form or fashion. So, we are rather unique in the sense that we can claim the US Air Force and SMC [Space and Missile Systems Center] as one of our largest customers, and, probably in our top 10 or top five, Intelsat and SES are also very large customers.” The advent of 5G mobile telecommunications networks, and its promise of hyper-connectivity through the Internet of Things including from space, has mesmerized DoD and the Intelligence Community, as well as industry. The chief benefit of tying together satcom and wireless and terrestrial networks, for both national security and commercial communications, is expanded reach to hard-to-access areas. For example, satellite signals have trouble penetrating areas like ‘urban canyons'; laying fiber and erecting cell-towers in rural and harsh terrain such as mountainous regions is very costly if not impossible, but satellite communications is relatively simple. The challenge is integrating currently incompatible (in more ways than one) and heavily stovepiped networks in a seamless fashion that allows near-instantaneous roaming among them. That is why the ground system issue is so important. “We think that there's a substantial change that needs to take place from the ground perspective,” Carrai said. Not only will there need to be “way more sites” to connect to fast-moving LEO satellites due to the simple laws of physics, but satellite ground stations will need to be configured more like terrestrial communications nodes with machine-to-machine operations ensuring the best link to any one satellite at a given place or time. Chris Badgett, Kratos VP for Technology, explained that this kind of “dynamic resource allocation or that dynamic situational awareness” is particularly important to military users in order to provide jam-proof communications. In essence, this would allow a military radio to ‘jump' from one frequency being jammed to another that is open. Today, if ‘changing the channel' is possible, it is up to a solider or sailor or Marine to figure that out and manually flip switches. The ultimate goal is to automate that frequency and network ‘hopping' capability so that users don't even notice that it's being done. The mess that is the world of DoD satcom terminals is a long-standing sore-thumb for operators, particularly in the Army. As Breaking D readers know, DoD currently maintains 17,000 terminals with “approximately 135 different designs,” as the Government Accountability office found. Those terminals operate across diverse platforms—such as ships, backpacks, vehicles and aircraft — all with differing system requirements, so that for the most part each terminal system (i.e. each type of radio) is tied to only one satellite network and one type of platform. And while fixing the current problem is already a Herculean task, it could be a show-stopper to Dod's vision of future all-domain operations, linking sensors and shooters provided by all the services together via a Joint All-Domain Command and Control (JADC2) network. “The major obstacle that we have from a ground system standpoint is the current ground architectures have all been designed and developed in a very stove-piped and mission-specific sense. And so each ground system was designed for the mission that it was supporting,” said Frank Backes, senior VP for Kratos Space Federal Solutions. “Where we're going now with a joint, or combined, capability is the integration of those ground systems. And therein lies the complexity. “How do you take a legacy-based architecture that was very stovepipe designed and integrate it together into a common system that gives you enterprise-wide control of the infrastructure, and also gives you the awareness of all the systems? It's very easy to become overwhelmed in the information that a combined system provides,” Backe added. As Breaking D readers know, sorting out those answers is what Gen. Jay Raymond, head of the Space Force, set out to do with his Vision for Enterprise Satellite Communications (SATCOM). That is aimed at creating a seamless network of military and commercial communications satellites in all orbits, accessible to troops, vehicles, ships and aircraft via ground terminals and mobile receivers that would automatically “hop” from one satellite network to another. Carrai said Kratos believes that ultimately the “current analog stovepipe infrastructure that exists today” must simply be replaced. What is needed for integrated satcom is “a roaming modem or a roaming terminal,” and the ability to integrate satellite-provided imagery into the network, a “kind of a virtual antenna.” “If you don't have that capability, you're not going to be resilient, it's going to cost a lot of money, and you're going to create a huge exposure because everybody's going to know what antennas are used for what purpose,” he added. All that said, Carrai opined that partly because of push from the Space Force, the stovepipe problem with milsatcom networks is beginning to change. “It's still a struggle,” he said, because “there's a lot of drive from the spacecraft manufacturers to link the ground system with it. You know, that's what makes it a multibillion dollar system.” In addition, he said, the scramble by commercial satcom operators to get on the 5G bandwagon is forcing them to figure out how to open up proprietary networks. “Commercial operators all see that 5G and data is their future, not broadcast, he said. “The commercial operators are going to lead if not the defense side because they have to interoperate with the telecom operators if they're going to survive.” https://breakingdefense.com/2020/08/kratos-targets-ground-system-revolution

  • Expand missile defenses during the pandemic, don’t cut them

    6 mai 2020 | International, Aérospatial

    Expand missile defenses during the pandemic, don’t cut them

    By: Rebeccah L. Heinrichs Rogue states are taking advantage of the American preoccupation with the COVID-19 pandemic. North Korea may test another long-range missile according to the head of U.S. Northern Command, Gen. Terrence O'Shaughnessy. He warned Congress in March that the North Korean regime is still a serious threat and is improving its missile program. And last week, Iran's Revolutionary Guard successfully launched a satellite into space. This was the first for the terrorist paramilitary group, though not the first for the regime. The pandemic is likely to prompt Congress to reassess, cut and redirect spending, but safeguarding the American people from missile attack is an essential service the government cannot afford to scale back. Deputy Assistant Secretary of Defense Rob Soofer said at a recent Hudson Institute event: “[T]oday we are in an advantageous position vis-a-vis North Korea. Forty-four ground-based interceptors. Gen. O'Shaughnessy has complete confidence that the system will work and we can address the threat. Then the question is: Can we wait until 2028?” The Trump administration intends to deploy in 2028 the Next Generation Interceptor, or NGI, meant to handle far more complicated missile threats than what the Ground-based Midcourse Defense, or GMD, system was initially designed to do. Still, as Dr. Soofer explained, threats develop at an unpredictable pace, and so the Pentagon is pushing for initiatives to bolster defense in the meantime. Those initiatives will require serious bipartisan cooperation while concurrently developing the NGI and pursuing other advanced capabilities meant to dramatically increase the ability of the missile defense architecture. It's a tall order, but critical, nonetheless. First, and to be clear, the Pentagon has not yet embraced this step due to its determination to focus on NGI. But Congress should invest in more than just sustaining the current GMD system; it should improve it by adding 20 GBIs to the already fielded 44. The silos will be prepared for the additional numbers since, in 2017, President Donald Trump called for adding more deployed GBIs considering the heightened North Korea missile threat. The Pentagon began work on preparing for their delivery but never emplaced GBIs into those silos because Pentagon officials canceled the Redesigned Kill Vehicle. The Pentagon had anticipated the Redesigned Kill Vehicle for the nation's new GBIs. After evaluating the resources and time it would take to restart the production line of the Capability Enhancement II interceptors or to rapidly develop an improved kill vehicle that leverages new technology, the Pentagon should choose the most cost-effective solution. Recall, the Capability Enhancement II was the kill vehicle that performed well in the last complex flight test, which was the first salvo engagement of a threat-representative intercontinental ballistic missile target by GBIs. Regardless of the option the Pentagon would choose, the result would be a near-term enhanced capability by either increased capacity at a minimum, or an increased capacity with improved kill vehicles on 20 of the 64 at best. Either would be a much better scenario than keeping the backbone of homeland defenses stagnant while we anticipate the NGI in 2028. But that is not all the country should do. It should also move forward with steps the Pentagon has embraced. Those steps include improving the discrimination radar capability in the next few years so GMD can better detect and characterize the evolving threat, and deploying other existing systems to bolster GMD. Utilizing current systems with impressive testing records against missiles shorter than ICBM range as part of a layered homeland defense is called the “underlay.” As a key component of the underlay, Congress has directed the Pentagon to test the Aegis SM-3 IIA interceptor against an ICBM target. Unfortunately, because of the pandemic, the Missile Defense Agency's planned flight tests will be delayed, including for the SM-3 IIA. The threats facing the country will not wait for the end of the pandemic, and the Pentagon should reconsider that delay. As soon as the country can test the system, and if it is a success, it would be wise to prepare to deploy Aegis SM-3 IIA as the threat requires. If there is an ICBM attack against the U.S. homeland, a GBI would have the first shot at the incoming missile while it's in its midcourse phase of flight; and if an enemy missile gets through, and the Aegis SM-3 IIA is positioned correctly, it could have another shot at the missile as it begins its descent. There has been some concern about whether Russia or China have legitimate claims that bolstering homeland defense in this way is destabilizing. But no evidence supports these claims, and, as Dr. Jim Miller, an Obama-era undersecretary of defense for policy, said at a recent Hudson event: “We cannot and must not give Russia or China a veto over the United States' ability to defend ourselves from North Korea and Iran. That is an absolute no-go for any administration.” Another system that is a natural candidate for the underlay is the Terminal High Altitude Area Defense air defense system. Embracing that concept as well, Dr. Miller said: “It makes sense for certain contexts. And if you're looking at a shorter-range missile and a relatively small footprint of coverage, THAAD has a real chance to contribute in that. To me, that's certainly the case for Guam and Hawaii.” But what about cost? That's the $10 billion question — a question that happens to be valued at more than the current president's budget requires for the Missile Defense Agency. The budget request that Congress is currently considering for the MDA is roughly $9.2 billion, noticeably less than previous years, even as the role of missile defense is supposed to be expanding in the country's National Security Strategy. There is no margin for cutting the budget. Congress should rally around this mission and budget, and it should increase funding to sufficiently make these necessary improvements in the near term without paying for them by sacrificing investments like NGI for the not-so-distant future. It can do that without tipping the scale much more than $10 billion this year. That is eminently reasonable given the pressure every government department will feel after the sudden spending splurge due to the COVID-19 pandemic. Rebeccah L. Heinrichs is a senior fellow at the Hudson Institute where she specializes in nuclear deterrence and missile defense. https://www.defensenews.com/opinion/commentary/2020/05/05/expand-missile-defenses-during-the-pandemic-dont-cut-them/

Toutes les nouvelles