4 juin 2024 | International, Sécurité

Telerik Report Server Flaw Could Let Attackers Create Rogue Admin Accounts

Critical security flaw discovered in Progress Telerik Report Server (CVE-2024-4358, CVSS 9.8/10). Remote attackers could bypass authentication.

https://thehackernews.com/2024/06/telerik-report-server-flaw-could-let.html

Sur le même sujet

  • Army Wants Industry Input For Reliable Exoskeleton (Not Iron Man, Yet!)

    2 septembre 2020 | International, Terrestre, Autre défense

    Army Wants Industry Input For Reliable Exoskeleton (Not Iron Man, Yet!)

    By SYDNEY J. FREEDBERG JR. SOCOM couldn't build a bulletproof Iron Man. But Army experiments with more modest lower-body exoskeletons have shown real-world potential to help overburdened foot troops. WASHINGTON: Army Futures Command is drafting a formal requirement for a military exoskeleton and will seek feedback from manufacturers at a November industry day. The Army's top priority, officials told me: rapidly prototyping a system that helps the wearer “move faster, travel further, and carry heavier loads” – without breaking down in the heat of battle. “Reliability is a huge issue that needs to be resolved,” said Ted Maciuba, deputy director of robotic requirements for Futures Command. Now, don't expect a full-body bulletproof suit that can fly and access huge databases out of science fiction. “We are not going after the Starship Troopers/Iron Man system right off the bat,” said Rich Cofer, a former soldier who's now the Army's lead “capabilities developer” on the exoskeleton project. “We're not going to jump right in and expect Tony Stark... Expectation management is key.” (That's a stark contrast to Special Operations Command's highly publicized TALOS program, which explicitly compared itself to Iron Man but produced nothing of the kind). So instead of Iron Man, think Iron Leg. In a “soldier touchpoint” last December at Fort Drum, NY, Army soldiers from more than two dozen Military Occupational Specialties — ranging from infantry to supply — tried out various types of “lower-body exoskeletons,” including the Lockheed Martin ONYX that our own Paul McLeary tries out in this video. In essence, these are motorized knee braces and other wearable reinforcements for the legs that lighten the load on overburdened soldiers as they march for hours with heavy packs, manhandle artillery shells and such. The goal isn't to give the wearer superpowers, but to reduce fatigue and risk of injury. During the Fort Drum trials, “there were significant increases in the effectiveness of soldiers,” Maciuba told me. “The soldiers were able to do more with the exoskeleton than they could without.” That said, “we learned [that] there needs to be enough reliability engineered into our systems so that there is a very high probability they will not fail in use,” Maciuba continued. “It's one thing to be wearing a boot whose sole flips off. You can always take some 100-mile-an-hour tape and tape that back on your foot. It's another thing to be wearing an exoskeleton” that requires specialized training and tools to fix. So reliability will be a high priority when the Army speaks to potential vendors in mid-November. By that point, Maciuba & co. expect to have a draft Abbreviated Capabilities Development Document for industry to review and offer comment on. (Army Futures Command officially gave them the go-ahead to write the ACDD on Aug. 14th; the exoskeleton project falls under the command's Soldier Lethality team, with input from PEO-Soldier acquisition officials, Natick Soldier Systems Center researchers, and capability managers for infantry, armored, and Stryker units). While unclassified, the document will be considered sensitive and only released to qualified contractors. While the ACDD is formally considered a requirements document, Maciuba told me, it's not going to set rigid technical specs as would a traditional Army requirement. The technology is advancing way too fast to get that detailed at this early stage. Instead, he said, it will outline “desirable characteristics” but leave industry plenty of leeway to innovate on specific ways to achieve them – and the Army is open to revising those desires based on what industry says is actually achievable. “We want industry to grade our work,” Maciuba said. The industry day – which will be held online unless there's some miraculous breakthrough with COVID-19 – will include both a general session open to all contractors and one-on-one meetings with specific contractors so they can discuss their technology without competitors listening. Afterwards, Maciuba, Cofer, & co. will compile the feedback from all the companies, revise the ACDD, and send it to Army leaders for approval. The final Abbreviated Capabilities Development Document should be out by the end of 2021, Cofer estimated. The next step? Use a streamlined acquisition process known as Section 804, intended to field a working prototype within five years – that is, Maciuba cautioned, if the Army can find the funding. https://breakingdefense.com/2020/09/army-wants-industry-input-for-reliable-exoskeleton-not-iron-man-yet/

  • U.S. Air Force, Lockheed Martin Complete Another Successful Hypersonics Test

    12 août 2020 | International, Aérospatial

    U.S. Air Force, Lockheed Martin Complete Another Successful Hypersonics Test

    Orlando, Fla., Aug. 10, 2020 – The U.S. Air Force and Lockheed Martin [NYSE: LMT] successfully flight tested the second AGM-183A Air-Launched Rapid Response Weapon (ARRW) on the service's B-52 Stratofortress out of Edwards Air Force Base, California, on Aug. 8, 2020. This captive carry flight was conducted with tactical hardware and fully instrumented to collect thermal, mechanical and digital data from the flight vehicle. This is the first time a tactical ARRW missile has been assembled. Additional ground and flight testing will follow over the next two years. “The team overcame significant challenges driven by the COVID-19 pandemic to achieve this significant milestone for the program,” said Dave Berganini, ARRW program director at Lockheed Martin Missiles and Fire Control. “This captive carry mission is the pre-cursor for our first booster test flight planned for early 2020s.” Hypersonic weapons provide rapid response, time critical capability that will overcome distance in contested environments using high speed, altitude and maneuverability. An operational hypersonic air-launched weapon enables the U.S. to hold fixed, high value, time-sensitive targets at risk in contested environments from stand-off distances. Lockheed Martin has played a significant role in the research, development and demonstration of hypersonic technologies for more than 30 years. The corporation has made significant investments in key technology and capability development. We have developed deep expertise in the engineering of hypersonic systems and associated challenges through our work with maneuvering reentry vehicles, air-breathing engine design, avionics, and aero/thermal flight sciences. About Lockheed Martin Headquartered in Bethesda, Maryland, Lockheed Martin is a global security and aerospace company that employs approximately 110,000 people worldwide and is principally engaged in the research, design, development, manufacture, integration and sustainment of advanced technology systems, products and services. For additional information, visit our website: www.lockheedmartin.com. Please follow @LMNews on Twitter for the latest announcements and news across the corporation. View source version on Lockheed Martin: https://news.lockheedmartin.com/news-releases?item=128963

  • Oshkosh Defense receives JLTV order for $208 Million

    7 novembre 2023 | International, Terrestre

    Oshkosh Defense receives JLTV order for $208 Million

    The order is valued at $208 million and includes JLTVs for the U.S. Army, U.S. Marine Corps and U.S. Air Force.

Toutes les nouvelles