C2, TACTICAL COMMUNICATIONS, AI, CYBER, EW, CLOUD COMPUTING AND HOMELAND SECURITY UPDATE

Sponsored by Spectra Group

 

Spectra Group (UK) Ltd Home Page

————————————————————————

02 Nov 23. Revector continue their low SWaP development strategy with a suite of highly portable but extremely powerful IMSI detection and location units to provide complete flexibility to end user operations.

Whether it is Search and Rescue, Defence, Intelligence, or Security activities, Revector’s Detector suite of IMSI (International Mobile Subscriber Identity) and WiFi detection and location solutions have been designed to provide the capabilities of historically much larger and cumbersome units now condensed in smaller, compact and lighter form factors whilst providing superior capability and performance.

Today organisations are looking for products that have multi use  capabilities and can be utilised across their operations.  This reduces expenditure of buying products that are required to be permanently deployed in vehicles for instance and provide the flexibility of allowing products to be utilised in different configuration options in theatre.

With newly designed SDR and filter configurations, the Revector Detector solutions can have 2,4,6 channel options, whilst providing improved power, increasing from previous 5w output to closer to 10w output on the UAV and portable hand carried units.  With newly developed filters, the improved quality of a cleaner transmit and receive signal means detection capabilities have improved dramatically.

Units can be daisy chained together allowing doubling, trebling of channel capabilities for specific operations when quick responsive simultaneous channel scanning options are required and can then be split and utilised elsewhere very easily.

Whether by air, foot or on road, Revector have a UAV payload that has its own power or can take power from the UAV, portable hand carried unit with hot swap batteries and a portable vehicle unit with increased power amplification that can run off vehicle 12v power

The ‘plug and play’ approach can ensure that such technology is being used to its full potential within an organisations operations and reduces huge amounts of equipment redundancy.

Andy Gent, CEO of Revector said “We are always listening  to our customers and end users and the underlying requirements apart from performance and reliability was practicalities of being agile, this has driven us to always ensure that Low SWaP scalable products is at the fore of our development”

About Revector

Revector is a leading UK developer of cell site simulators and mobile phone surveillance solutions for public safety, security and intelligence applications.

Revector produce a multi-channel UAV/Drone IMSI Catcher payload weighing just 1.4Kg, a 3.3Kg covert hand carried option as well powerful vehicle units to ensure every operational situation is covered.

 

 

02 Nov 23. Deputy Secretary of Defense Kathleen Hicks Announces Publication of Data, Analytics and AI Adoption Strategy, Deputy Secretary of Defense Kathleen Hicks announced the release of the 2023 DOD Data, Analytics, and AI Adoption Strategy. The document was developed by the Chief Digital and AI Office (CDAO) and unifies previous strategic guidance to scale advanced capabilities across the enterprise. The announcement was made today during a press event hosted by Deputy Secretary Hicks on ‘The State of AI in the Department of Defense.’

“We’ve worked tirelessly, for over a decade, to be a global leader in the fast and responsible development and use of AI technologies in the military sphere, creating policies appropriate for their specific uses.” said Deputy Secretary Hicks. “As we’ve focused on integrating AI into our operations responsibly and at speed, our main reason for doing so has been straightforward: because it gives us even better decision advantage than we already have today.”

The first DOD AI Strategy, published in 2018, and revised DOD Data Strategy, published in 2020, are two foundational documents that matured the Department’s data-centric structures to increase the efficacy of fielding modern AI-enabled capabilities.

Since these strategies were published, industry has produced tools, platforms, and services, enabling effective, decentralized data management, and analytics and AI development. This updated 2023 Strategy focuses on how the Department will accelerate adoption of data, analytics and AI in a manner that is repeatable by all DoD Components.

“Accelerating the adoption of advanced data, analytics, and artificial intelligence technologies presents an unprecedented opportunity to equip Department leaders, at all levels, with the data they need, to make better decisions faster, from the boardroom to the battlefield,” said the Chief Digital and AI Officer, Craig Martell. “Our strategic approach prioritizes an agile approach to adoption by focusing on the fundamentals of speed, agility, responsibility, and learning.”

The CDAO worked closely with offices across the DoD to develop the 2023 Data, Analytics, and AI Adoption Strategy. Implementation will ensure that Department has stronger alignment and synchronization to scale advanced capabilities for use across the enterprise.

The CDAO became operational in June 2022 and is dedicated to integrating and optimizing artificial intelligence capabilities across DOD. The office is responsible for accelerating DOD’s adoption of data, analytics, and AI, enabling the Department’s digital infrastructure and policy adoption to deliver scalable AI-driven solutions for enterprise and joint use cases, safeguarding the nation against current and emerging threats

For more information about the symposium or for a downloadable copy of the 2023 DOD Data, Analytics, and AI Adoption Strategy, please visit the CDAO website at ai.mil. You can also connect with the CDAO on LinkedIn (@ DoD Chief Digital and Artificial Intelligence Office) and Twitter (@dodcdao). Additional updates and news can be found on the CDAO Unit Page on DVIDS. (Source: U.S. DoD)

 

02 Nov 23. System (WICS) family to Deliver Greater Flexibility and Seamless Communication. Axnes AS a leading provider of advanced wireless communication solutions, today announced an innovative new Tactical Team Bubble capability for its PNS Wireless Intercom System (WICS) family.

PNG Wireless Intercom System (WICS), team members can establish a dedicated network to support the real-time transfer of mission-critical information and maintain reliable real-time communication in critical operations. This revolutionary feature enables tactical teams to communicate directly with each other by setting up a tactical communication bubble with just handhelds, enhancin team flexibility.

The Team Bubble concept represents a paradigm shift in wireless communication, empowering teams to communicate seamlessly without limitations such as when moving from a mounted to dismounted operation, that are associated with a traditional base station.

“With the introduction of the Tactical Team Bubble capability, Axnes is redefining wireless communication solutions,” said Klaus Früwirth, Chief Marketing Officer of Axnes AS. “We are thrilled to launch this ground-breaking feature to streamline communication and eliminate redundant hardware while providing teams with unprecedented flexibility, freedom, and cost savings. The Tactical Team Bubble capability is a game-changer for team communication.”

The Tactical Team Bubble capability provides several key benefits to organizations across various sectors. By removing the reliance on a platform base station, teams can operate with greater mobility and flexibility, enabling them to adapt quickly to changing environments and circumstances. This enhanced freedom of movement ensures that teams can communicate effectively, regardless of their location or proximity to a central communication hub.

Deploying the Tactical Team Bubble concept with the Axnes PNG Wireless Intercom System (WICS) preserves teams’ abilities to tap into the renowned features of the system, including crystal-clear audio quality, robust reliability, and real-time situational awareness. Teams can rely on the WICS’ intuitive interface and advanced functionality to enhance collaboration, coordination, and mission success.

Axnes’ commitment to continuous innovation and customer satisfaction drives the development of cutting-edge wireless communication solutions like the Tactical Team Bubble solution. The company’s expertise in wireless intercom technology spans various sectors, including aviation, defense, law enforcement, and emergency services, enabling organizations to achieve seamless coordination and unparalleled situational awareness.

For more information about Axnes and their advanced wireless intercom solutions, please visit their website at www.axnes.com.

This achievement reinforces Axnes’ position as a leading player in the wireless defence communication market and is a testament to Axnes’ dedication to excellence and its commitment to delivering state-of-the-art defence solutions.

About Axnes

Axnes develops and supplies advanced and highly durable wireless intercom solutions for use under harsh conditions for aerospace and defense applications. Today more than 2,400 aircraft worldwide are equipped with Axnes’ wireless technology. Axnes was founded in 1995 and is a privately- owned company headquartered in Norway with offices in the United Kingdom, Austria, and the United States of America, and worldwide distribution through its partner network. The company has been supplying its wireless  intercom  systems  for  two decades and is an EASA Part 21 and Part 145 approved quality organization. Our team is driven by the belief that producing and developing the most advanced and versatile wireless intercom system contributes to saving lives in demanding operational environments. Read more at www.axnes.com

 

03 Nov 23. L3Harris could update F/A-18 electronic attack systems to rival the Growler. The final decision for follow-on development is expected in 2026. The next phase of the down-complete selection for the F/A-18 electronic warfare (EW) modernisation has begun, with L3Harris one of two manufacturers to make it through, winning an $80m US Navy contract for the design an electronic attack system that can provide prompt threat detection, the company announced 2 November.

The final decision for follow-on development is expected in 2026, when the decision between the final to manufacturers will be made and  production contracts awarded.

“L3Harris is developing the advanced EW system to drive mission success and ensure naval aviators are protected for years to come,” said Ed Zoiss, L3Harris President of Space and Airborne Systems. “This award builds upon decades of delivering EW systems to the Navy, and we are excited that our technology is protecting pilots in dangerous situations while allowing them to dominate potential adversaries.”

The advanced L3Harris system is designed to offer an integrated electronic support measure and electronic attack system, enabling efficient threat detection across all relevant radio frequency bands. This system incorporates a modular open systems approach and open mission systems compliant design, enabling the fleet to conveniently integrate new and upgraded technology, resulting in time and cost savings.

L3Harris was contracted in 2020 for the production of the F/A-18 Hornet and Super Hornet EW system, winning a $104m award for Integrated Defensive Electronic Countermeasures jammer systems, but the electronic attack capabilities of the F/A-18 are outstripped by the EA-18G Growler.

The EA-18G Growler is a variant within the F/A-18 family of aircraft that incorporates the well-established F/A-18F Super Hornet platform along with an advanced EW suite. The Growler is equipped with an electronic attack system that includes a dedicated Electronic Attack Unit, a modified EA-6B Improved Capabilities ALQ-218 receiver system, and Legacy ALQ-99 jamming pods.  (Source: naval-technology.com)

 

02 Nov 23. DOD Releases AI Adoption Strategy. The Defense Department today released its strategy to accelerate the adoption of advanced artificial intelligence capabilities to ensure U.S. warfighters maintain decision superiority on the battlefield for years to come.

The Pentagon’s 2023 Data, Analytics and Artificial Intelligence Adoption Strategy builds upon years of DOD leadership in the development of AI and further solidifies the United States’ competitive advantage in fielding the emerging technology, defense officials said.

“As we focused on integrating AI into our operations responsibly and at speed, our main reason for doing so has been straight forward: because it improves our decision advantage,” Deputy Defense Secretary Kathleen Hicks said while unveiling the strategy at the Pentagon.

“From the standpoint of deterring and defending against aggression, AI-enabled systems can help accelerate the speed of commanders’ decisions and improve the quality and accuracy of those decisions, which can be decisive in deterring a fight and winning in a fight,” she said.

The latest blueprint, which was developed by the Chief Digital and AI Office, builds upon and supersedes the 2018 DOD AI Strategy and revised DOD Data Strategy, published in 2020, which have laid the groundwork for the department’s approach to fielding AI-enabled capabilities.

The new document aims to provide a foundation from which the DOD can continue to leverage emerging AI capabilities well into the future.

“Technologies evolve. Things are going to change next week, next year, next decade. And what wins today might not win tomorrow,” said DOD Chief Digital and AI Officer Craig Martell.

“Rather than identify a handful of AI-enabled warfighting capabilities that will beat our adversaries, our strategy outlines the approach to strengthening the organizational environment within which our people can continuously deploy data analytics and AI capabilities for enduring decision advantage,” he said.

The strategy prescribes an agile approach to AI development and application, emphasizing speed of delivery and adoption at scale leading to five specific decision advantage outcomes:

Superior battlespace awareness and understanding

Adaptive force planning and application

Fast, precise and resilient kill chains.

Resilient sustainment support.

Efficient enterprise business operations.

The blueprint also trains the department’s focus on several data, analytics and AI-related goals:

Invest in interoperable, federated infrastructure

Advance the data, analytics and AI ecosystem

Expand digital talent management.

Improve foundational data management.

Deliver capabilities for the enterprise business and joint warfighting impact.

Strengthen governance and remove policy barriers.

Taken together, those goals will support the “DOD AI Hierarchy of Needs” which the strategy defines as: quality data, governance, insightful analytics and metrics, assurance and responsible AI.

In unveiling the strategy, Hicks emphasized the Pentagon’s commitment to safety and responsibility while forging the AI frontier.

“We’ve worked tirelessly for over a decade to be a global leader in the in the fast and responsible development and use of AI technologies in the military sphere, creating policies appropriate for their specific use,” Hicks said. “Safety is critical because unsafe systems are ineffective systems.”

In January, the Defense Department updated its 2012 directive that governs the responsible development of autonomous weapon systems to the standards aligned with the advances in artificial intelligence.

The U.S. has also introduced a political declaration on the responsible military use of artificial intelligence, which further seeks to codify norms for the responsible use of the technology.

Hicks said the U.S. will continue to lead in the responsible and ethical use of AI, while remaining mindful of the potential dangers associated with the technology.

“By putting our values first and playing to our strengths, the greatest of which is our people, we’ve taken a responsible approach to AI that will ensure America continues to come out ahead,” she said. “Meanwhile, as commercial tech companies and others continue to push forward the frontiers of AI, we’re making sure we stay at the cutting edge with foresight, responsibility and a deep understanding of the broader implications for our nation.” (Source: U.S. DoD)

 

01 Nov 23. LM Brings Advanced Communications Out of the Lab and Into the Field.

• 5G.MIL Unified Network Solutions demonstrates secure, resilient hybrid networking

For the first time, Lockheed Martin demonstrated its Hybrid 5G-Tactical Mesh Network live in a multi-domain environment. This is a significant step toward ensuring the Department of Defense (DOD) has seamless access to critical information. Working with leading commercial technology companies, Lockheed Martin proved the integration of existing technologies with enhanced capabilities that provide superior advanced communications operations and management tools for military applications.

The 5G.MIL® Unified Network Solutions (UNS) were successfully tested across numerous mission simulations  to establish stability and suitability for use in Joint All-Domain Operations (JADO) and Combined Joint All-Domain Command and Control (CJADC2). The resilient 5G.MIL UNS tactical mesh network and Lockheed Martin’s AI Factory machine learning operations platform were critical to successfully deploying these AI-based capabilities.

Why it Matters

In this demonstration Lockheed Martin’s 5G.MIL UNS performed as a tactical and commercial multi-node hybrid network for land, air and space domains—demonstrating system capabilities, performance and operations for customers in a field setting—and achieving Technology Readiness Level (TRL) 6+, meaning it is a fully functional prototype model. The deployed hybrid network included five hybrid base stations with 5G, tactical datalinks and space backhaul. Fifteen individual capabilities were demonstrated across mission scenarios, covering interoperability, resilience, security and operations. This exercise provided an opportunity to stress test the maturity and resilience of the independent hybrid network in a mission relevant scenario.

5G.MIL UNS Harnesses Advanced Commercial Technology

Lockheed Martin’s solutions deploy, orchestrate and manage enhanced commercially available technologies from multiple embedded collaborators, including:

• Intel’s FlexRAN™ reference software and processor capabilities.
• Verizon’s adapted Mobile Onsite Network-as-a-Service (NaaS) solution and Single Pane of Glass (SPoG) Network Management tool.
• Microsoft’s Azure Orbital Cloud Access (AOCA), Microsoft’s solution for cloud-to-edge via SATCOM, and Azure Government cloud environment at Impact Level 4 (IL4).
• Juniper Networks’ Session Smart Router (SSR) technology and the 5G Radio Access Network (RAN) Intelligent Controller (RIC).
• Keysight’s RF planning, configuration and optimization tools.
• Radisys’ End-to-end 5G Network Software.

Strategic Perspectives

Dan Rice, vice president, 5G.MIL UNS Programs, Lockheed Martin:

“To stay ahead of evolving security challenges, military commanders need fast, secure access to critical information for decision superiority, no matter the circumstances. Collaborating with commercial and defense technology leaders is a key component of Lockheed Martin’s 21st Century Security vision and accelerates our delivery of secure 5G.MIL® Unified Network Solutions to enable prompt, data-driven decisions across all operational domains.”

Caroline Chan, vice president & general manager, Network Business Incubator Division, Intel:

“Disaggregated hardware and software from Intel allows Lockheed Martin to provide more secure access to essential data which is fundamental to next generation communication networks being deployed for Defense Industrial Base applications. Utilizing these commercially available optimized building blocks that helps ease integration and accelerates deployments.”

Jason Payne, chief technology officer, Microsoft Federal:

“This exercise demonstrates how 5G.MIL can enable immediate information and decision-making advantage at the tactical edge through the combined power of hyperscale cloud, hybrid communications and 5G technologies. This demonstration showcases the strength of the Lockheed Martin and Microsoft relationship to drive innovation for critical missions for our national security customers.”

George Riggins, vice president, Public Sector Technology, Verizon:

“We are proud of our strong relationship with Lockheed Martin and our work to successfully leverage innovations using 5G technology to produce new capabilities that will benefit the defense of our nation. By allowing users to transition between private, public and managed service networks, we are delivering reliable, mission critical connectivity so they can continue their mission across a wide range of environments.”

Greg Bourdelais, vice president, Federal Sales, Juniper Networks:

“We are pleased to provide innovative 5G SD-WAN solutions that empower our partners to achieve their goals, and we were honored to be a part of Lockheed Martin’s 5G.MIL field demonstration showcasing the utmost efficiency and effectiveness in challenging environments. The recent demonstration stands as a testament to the power of network collaboration, showcasing critical performance and operational networking excellence required in meeting the highest standards and driving successful customer outcomes.”

Munish Chhabra, senior vice president & general manager, Software & Services, Radisys:

“Radisys is pleased to have collaborated with Lockheed Martin in achieving this successful 5G.MIL Hybrid Mesh demonstration to advance military networking solutions. With our award-winning Release 17 Connect RAN and 5G Core Network Software on Edge with resilient mobility, high bandwidth video upload support, Radisys looks forward to continuing to work with Lockheed Martin and its partners to advance robust, reliable tactical communications in a hybrid network via terrestrial and non-terrestrial access.”

Vince Nguyen, vice president and general manager, Aerospace, Defense and Government Solutions, Keysight:

“Lockheed Martin brought together commercial 5G market leaders to collaborate, innovate and accelerate resilient, tactical solutions and use-cases to market for hybrid networking solutions. Keysight is proud to be a key contributor with its performance and validation capabilities.”

What’s Next?

Lessons learned from this field demonstration are already being incorporated into Lockheed Martin 5G.MIL UNS. The company will continue to work with commercial collaborators toward an Initial Operating Capability (IOC) in 2024. (Source: ASD Network)

 

01 Nov 23. Georgia On My Mind. Armada has learned that Russian land forces have deployed several electronic warfare units to the regions of South Ossetia and Abkhazia.

South Ossetia is in the central northern region of Georgia. The area is recognised as Georgian territory by the United Nations (UN). South Ossetia is currently occupied by Russia and considered Russian territory by that country along with Nauru, Nicaragua, Syria and Venezuela. Abkhazia is in the extreme northeast of Georgia. Like South Ossetia, Abkhazia is occupied by Russia which claims this territory with the same four nations recognising Russian sovereignty. The UN considers Abkhazia to be Georgian territory.

Russia maintains a sizeable military presence in both areas which includes the deployment of Electronic Warfare (EW) units from the 58th Combined Arms Army, itself part of the Southern Military District (SMD). Armada has been told that elements of the 74th Radio Engineering Regiment and 14th Separate Electronic Warfare Battalion have deployed to these disputed regions. When not deployed, both these units are based in the city of Vladikavkaz, in the southern Caucuses, north of the Russo-Georgian border. EW units deployed to Abkhazia and South Ossetia are split into two companies. We have learned that one is based the southwest of the town of Tskhinvali, just north of the de-facto border between South Ossetia and Georgia.

These EW units regularly deploy to areas close to this de-facto border. Such deployments are almost certainly intended for the collection of Communications Intelligence (COMINT) from inside Georgia. The units often take advantage of elevated terrain to extend their COMINT collection line-of-sight into Georgian territory. Signals of interest probably include radio traffic from Georgian military, border police and law enforcement units on the south of the de-facto border. Russian EW units may also have some interest in civilian communications in border areas. For example, EW units have deployed to the town of Dzvileti, southwest of Tskhinvali, and Adzvistavi to the southeast. Russia’s FSB Federal Security Service is thought to have a base in the latter which is a mere 400 metres (0.2 miles) from the de-facto border. Details of the locations of Russian land forces EW deployments to Abkhazia are sketchy due to a lack of supporting imagery intelligence.

Capabilities

Armada’s sources have identified four EW platform types which have deployed to South Ossetia and Abkhazia. These systems include the R-330Zh Zhitel, RB-531B Infauna and R-381 Taran. Either, or both, elements of the Krasukha system, chiefly the 1L269 Krasukha-2 and 1RL257E Krasukha-4, may have also been deployed. The R-330Zh reportedly detects emissions across frequencies of 100 megahertz/MHz to two gigahertz/GHz. These wavebands comprise the lion’s share of frequencies used by civilian and military radio communications. The R-330Zh is said to only be capable of jamming signals transmitting on frequencies of 1.2276GHz to 1.9GHz. Zhitel can detect and jam surface targets at ranges of up to 15 kilometres/km (9.3 miles) and airborne targets at up to 108 nautical miles/nm (200km) using ten kilowatts of output power. The RB-531B is traditionally deployed with Russian airborne forces’ organic EW companies. The 58th CAA has an airborne unit in the form of the 7th Guards Air Assault Division. It is possible that the RB-531Bs may have been drawn from this formation and seconded to the EW companies in Georgia. Infauna detects and jams frequencies across a waveband of 25MHz to 2.5GHz. Unlike the R-330Zh this system has a solely tactical orientation and typically detects and jams communications emitters at a maximum range of six kilometres (3.7 miles). The R-381 has no electronic attack role and is a COMINT gathering asset covering frequencies of 1.5MHz to one gigahertz. Sources claim a 40km (25 mile) detection range for ground targets can be achieved by the R-381. Finally, both Krasukha systems detect and jam airborne emitters. The 1L269 covers frequencies of one to two gigahertz with the 1RL257 covering frequencies of eight to 18GHz. Both are thought capable of generating 2kW of jamming power and achieving ranges of between 81nm (150km) and 216nm (400km) for airborne targets. Krasukhas are deployed at operational/strategic levels with Russian Army EW brigades and Russian Air Force EW battalions. Krasukhas deployed to Georgia may have been seconded from the Russian Army’s 19th EW Brigade and/or the Russian Air Force’s 504th Independent EW Battalion. Both these formations form part of the SMD’s order of battle.

Customers

Sources have told Armada that the COMINT gathered by these assets is fed into the Russian government’s overall intelligence picture of the parts of Georgia it controls, and areas within range across the de-facto borders. Some jamming has also been performed by these EW units. For example, the European Union Monitoring Mission (EUMM) has experienced disruptions to its communications in the past. The EUMM monitors the September 2008 EU-mediated ceasefire which ended the Russo-Georgian War that same year.

While most of Russia’s land forces’ EW elements remain deployed to Russian-occupied parts of Ukraine, the news from Georgia shows there is a residual capability to deploy at least some of these to other theatres. Russia clearly has EW elasticity as these units could deploy to Ukraine should any EW ‘surge’ be required. The Georgia deployment also underscores that Russian military EW units are used as general intelligence collection assets for the country’s spy agencies. (Source: Armada)

 

01 Nov 23. Radioflash! Episode-7: Superiority Complex. It is a truism of military theory that the road to victory is harder for the side which does not win and sustain air supremacy.

It is now over eighteen months since the Russian government commenced its second invasion of Ukraine. The conflict has seen the shattering of some military aphorisms and the affirmation of others. One that has stood this test of time is that the achievement of air superiority and supremacy is a prerequisite for victory.

To date, neither the Russian nor Ukrainian military has established air superiority, the overture to securing air supremacy. There are subtle, yet important differences between these conditions: Air superiority means one side largely prevents the other from using airpower. Air supremacy means that opposing airpower is all but nullified.

Suppression of enemy air defences forms a key part of what the North Atlantic Treaty Organisation calls the Offensive Counter-Air mission (OCA). In turn, OCA is the tactical embodiment of the quest for air superiority and supremacy. Russian and Ukrainian airpower has performed energetic OCA efforts, but air superiority remains elusive for both sides.

In this podcast we are joined by Colonel Jeffrey H. ‘Fisch’ Fischer, a European and global security expert, Ukraine watcher and author of the Curt Nover series of thrillers. We discuss initial perceptions of Russian airpower and ground-based air defence strengths. Premature predictions of the ineffectiveness of Ukrainian airpower are questioned, while Ukrainian success in destroying Russian air defence systems are highlighted. Why is Russia’s use of the electromagnetic spectrum seeming to contribute to Russian Air Force fratricide? What role have uninhabited aerial vehicles played in the battle for air supremacy? Will the Link-16 tactical datalink be used by the Ukrainian Air Force and what effect might this have on the battle? Moreover, how is Ukraine’s military contributing to the ongoing OCA battle? Should Ukraine win the OCA battle, how might this achievement affect the wider war? All these questions fall under the Radioflash! spotlight. Tune in to find out more.

(Source: Armada)

 

01 Nov 23. November Spectrum SitRep. Armada’s monthly round-up of all the latest electronic warfare news in the product, programme and operational domains.

Museum Pieces

Is your company, organisation or even your good self in possession of some electronic warfare or radar history that had an impact far beyond the military domain? Did that black box or circuit board proudly displayed in your office cabinet change our everyday lives in some unsung, yet pivotal, way? Perhaps you have a similar story to share about your work? If so, the United Kingdom’s Imperial War Museums (IWM) want to hear from you.

The IWM and Lloyd’s Register Foundation are collaborating on a five-year project entitled Lifesavers to explore how conflict has driven innovation in science and technology. The project will look at how innovation affects safety today on land, at sea and in the air. From tiny personal possessions and insignia to aircraft and warships, IWM’s collections span all major British and Commonwealth conflicts since 1914. The collections provide a rich resource for examining the connection between conflict and innovation. If it was not for warfare, would we have much of the science and technology we take for granted today?

From advances in aviation technology during the Second World War, to modern air travel. From the rescue of downed wartime pilots to modern air-sea rescue and air ambulances. Safety equipment at sea, ejector seats, radar, radio and communications technology, the list of wartime innovation goes on.

Nonetheless, it is not just about the gadgets and machines in the IWM’s collections, fascinating as they are. Lifesavers also encompasses the social history of technological innovation. From the people who developed technology, those who used it in the field, to those who continued to innovate once peace was declared. IWM’s collections include many of the personal stories and voices of those who were there.

Lifesavers is a truly international project. As well as possible collaboration with British institutions such as the Science Museum, the Royal Navy and Lloyd’s Register Foundation themselves, the initiative aims to share collections and knowledge with museums around the world. The IWM already has links with museums in Canada, continental Europe, the Republic of Korea, Singapore and the United States.

One of the project’s deliverables will be a digital exhibition of objects, literature and stories relating to Lifesavers’ core themes. If you have something to exhibit such as a photographed object, infographics, literature or even just a great story to share please get in touch with Robert Rumble, the project curator in the IWM’s Cold War narrative team. Mr. Rumble can be contacted at .

IQ Test

HawkEye 360 announced in a 25th September press release that the company had launched a new RFIQ (Radio Frequency Inphase and Quadrature) product. The press release said that HawkEye 360 will make unprocessed IQ information available to customers. IQ information is a digital representation of specific RF waveforms. Customers can use this data to “analyse signal characteristics or survey RF activity over large regions of the Earth,” according to the press release. HawkEye 360’s clusters of RF sensing satellites collect information on signals across wavebands of 70 megahertz to 18 gigahertz. These wavebands, coupled with the company’s new RFIQ service, provide customers with “the ability to analyse a wide range of signals important to their mission.” Exploiting this RFIQ information lets users ‘drill down’ into the data to extract the signal information and characteristics they need. For example, customers may seek highly detailed information on specific radar or communications systems. These specifics can be extracted from the RFIQ data. Such data can be challenging to analyse but HawkEye 360 told Armada in a written statement that this information “offers sophisticated users the densest data we can deliver.” This provision is important because “expert (electronic intelligence) users often want to do more. They’ll have excellent tools and algorithms for in-depth analysis of the radio frequency spectrum, so we need to support them with the right type of data.” HawkEye 360 added that “RFIQ is useful for surveys of a region to gain a better perspective of the RF activity. This type of data is beneficial for conducting ELINT analysis to characterise detected emitters.” The statement said that the company’s RFIQ data service is already being used by several undisclosed customers. The RFIQ product has a selectable range of frequencies. Data is “delivered as a formatted I/Q data file (customers) can ingest into their analytical tools. We offer these customers a flexible set of options, to optimise collection based on their needs.”

Beyond AARGM-ER

Northrop Grumman announced in late September that the company had been awarded a $705m contract to provide the US Air Force (USAF) with the Stand-In Attack Weapon (SIAW). This air-to-surface missile is designed to prosecute relocatable targets, the company said in a press release. The document continued that the USAF is targeting 2026 to declare the weapon’s initial operational capability. Susan Bruce, Northrop Grumman’s vice president of advanced weapons, told Armada that SIAW “is an offshoot” of the company’s AGM-88G Advanced Anti-Radiation Guided Missile – Extended Range (AARGM-ER). AARGM-ER is the latest incarnation of the Texas Instruments/Raytheon AGM-88 HARM (High Speed Anti-Radiation Missile) family. Ms. Bruce said that SIAW will be capable of targeting Global Navigation Satellite System (GNSS) jammers, as well as radars. While no further details were provided, this implies that SIAW will contain a radio frequency sensor. This capability also suggests the weapon maybe capable of detecting and locating jammers operating in frequencies of one to two gigahertz. This waveband encompasses the frequencies routinely used by GNSS systems and hence GNSS jammers. Reports have stated that the SIAW will eventually replace the AGM-88G. AARGM-ER is earmarked for deployment onboard the USAF’s Lockheed Martin F-35A Lightning-II combat aircraft. (Source: Armada)

 

01 Nov 23. SAIC Announces New Data and AI Features To Improve Government Mission Outcomes. Science Applications International Corp. (NYSE: SAIC) today announced new offerings for Tenjin and additional features for Koverse.

“The new offerings and features for SAIC’s Data Science Suite ensure the right people have access to the right data at the right time to gain actionable insights for decision-making and problem solving across multiple domains,” said Andy Henson, vice president, Digital Innovation Factory at SAIC.

The innovative Tenjin offerings enable organizations to handle and store their complex sensitive data securely from the enterprise to the edge, as well as operationalize Artificial Intelligence (AI) while the additional Koverse features improve and accelerate the capacity for defense and civilian customers to unlock the value of their data.

SAIC is evolving its AI ecosystem by enhancing Tenjin, its low-code to full-code AI and Machine Learning (ML) development and orchestration platform, with several new offerings that address AI advancements. Tenjin’s data fusion offering is an AI-powered decision support tool for analysts that uses state-of-the-art Large Language Models (LLMs) to improve and streamline work. The tool helps analysts infer relationships, translate critical languages, identify entities and sentiment. The Natural Language Processing (NLP) offering provides a text and voice-focused software tool for classification, sentiment analysis, named entity recognition, summarization, speech-to-text conversion and translation. When integrated with the Tenjin solution, this capability provides customers with the most modern NLP capabilities and creates a powerful text and speech-powered AI-driven backbone for mission success.

SAIC is building upon Koverse, its security-first data platform that introduces attribute-based access controls (ABAC) to enforce zero trust for data, with the following new features for added functionality:

• Data synchronization allows users in different locations, with separate instances, to share data and receive updates made in either location while keeping data owner and user security controls intact.
• Video storage enables users to segment and securely store video at a frame-by-frame level using ABAC and encryption, while offering video playback at an authorized user’s access level.
• Edge capability provides users with enhanced security controls, while enabling the collection, security and processing of data locally in Denied, Disrupted, Interrupted or Limited (DDIL) edge environments.

“It is critical to bring your data together prior to enabling AI,” said Henson. “Together, these Tenjin and Koverse enhancements can be bundled and provide uniquely tailored text, speech, imagery and other all-source data capabilities to provide customers with the most modern and effective AI-driven mission outcomes.” (Source: BUSINESS WIRE)

 

02 Nov 23. Cyber1st Announces Tactical Symmetric Key Manager (T-SKM) Development. Cyber1st is to announce the development of a Tactical Symmetric Key Manager (T-SKM) to enable future deployed Over The Network Key (OTNK) requirements.

Launched at the Specialist Defence and Security Convention UK (SDSC-UK) to an audience including the UK Ministry of Defence (MOD) and US Department of Defence (US DOD), this technology will revolutionise the way High Grade information is securely exchanged. The new technology has no global boundaries, strategically improving security and overall mission-success anywhere in the world.

This device will greatly improve the safety of deployed personnel by allowing them to easily access secure networks and comms channels, even in the most remote locations and harshest environments. No longer will individuals have to wait to physically receive an encrypted key; access to classified information will be instantaneous, streamlining operations while maintaining security. This will save critical time in high-pressure situations.

The T-SKM product will benefit from all the features associated with the current Bulldog technology range including obtaining a High Grade CAPS1 certification to support Suite A and Suite B and is currently the only single person carry device of this type on the market.  The T-SKM package will be formed of two Bulldog SoHo or Bulldog Rugged sized devices providing User choice, along with a laptop running our easy-to-use Control Centre application with a dedicated SKM User Interface, allowing remote operation and configuration.

Designed and built to the latest NCSC OTNK standards, the T-SKM is a deployable small form factor solution to enable the key generation and delivery of up to 128 Bulldog High Grade encryption devices or any encryption device that that implements NCSC’s PRIME2 Symmetric Key Transfer Key Agent specification. The T-SKM will offer the greatest possible operational flexibility, reducing the critical time required to deploy IP networks across the globe to support data in transit requirements, along with representing significant value for money and greater security.

Bob Edge, Founder and MD of Cyber1st Ltd, said: “The T-SKM product continues our mission to deliver game changing, innovative and positively disruptive crypt-key solutions to Users. The T-SKM will enable cryptographic keys to be delivered and managed aligned to mission requirements at a pace and tempo, wherever the User needs them, in a unique way.”

 

31 Oct 23. SEC sues SolarWinds for alleged cyber neglect ahead of Russian hack. U.S. regulators sued SolarWinds, a Texas-based technology company whose software was breached in a massive 2020 Russian cyberespionage campaign, for fraud for failing to disclose security deficiencies ahead of the stunning hack.

The company’s top security executive was also named in the complaint filed Oct. 30 by the Securities and Exchange Commission seeking unspecified civil penalties, reimbursement of “ill-gotten gains” and the executive’s removal.

Detected in December 2020, the SolarWinds hack penetrated U.S. government agencies including the Justice and Homeland Security departments, and more than 100 private companies and think tanks. It was a rude wake-up call that raised awareness in Washington about the urgency of stepping up efforts to better guard against intrusions.

In the 68-page complaint filed in New York federal court, the SEC says SolarWinds and its then vice president of security, Tim Brown, defrauded investors and customers “through misstatements, omissions and schemes” that concealed both the company’s “poor cybersecurity practices and its heightened — and increasing — cybersecurity risks.”

In a statement, SolarWinds called the SEC charges unfounded and said it is “deeply concerned this action will put our national security at risk.”

Brown performed his responsibilities “with diligence, integrity, and distinction,” his lawyer, Alec Koch, said in a statement. Koch added that “we look forward to defending his reputation and correcting the inaccuracies in the SEC’s complaint.” Brown’s current title at SolarWinds is chief information security officer.

‘Repeated red flags’

The SEC’s enforcement division director, Gurbir S. Grewal, said in a statement that SolarWinds and Brown ignored “repeated red flags” for years, painting “a false picture of the company’s cyber controls environment, thereby depriving investors of accurate material information.”

The very month that SolarWinds registered for an initial public offering, October 2018, Brown wrote in an internal presentation that the company’s “current state of security leaves us in a very vulnerable state,” the complaint says.

Among the SEC’s damning allegations: An internal SolarWinds presentation shared that year said the company’s network was “not very secure,” meaning it was vulnerable to hacking that could lead to “major reputation and financial loss.” Throughout 2019 and 2020, the SEC alleged, multiple communications among SolarWinds employees, including Brown, “questioned the company’s ability to protect its critical assets from cyberattacks.”

SolarWinds, which is based in Austin, Texas, provides network-monitoring and other technical services to hundreds of thousands of organizations around the world, including most Fortune 500 companies and government agencies in North America, Europe, Asia and the Middle East.

The nearly two-year espionage campaign involved the infection of thousands of customers by seeding malware in the update channel of the company’s network management software. Capitalizing on the supply-chain hack, the Russian cyber operators then stealthily penetrated select targets including at least nine U.S. government agencies and prominent software and telecommunications providers.

In its statement, SolarWinds called the SEC action an “example of the agency’s overreach (that) should alarm all public companies and committed cybersecurity professionals across the country.”

It did not explain how the SEC’s action could put national security at risk, though some in the cybersecurity community have argued that holding corporate information security officers personally responsible for identified vulnerabilities could make them less diligent about uncovering and/or disclosing them — and discourage qualified people from aspiring to such positions.

Under the Biden administration, the SEC has been aggressive about holding publicly traded companies to account for cybersecurity lapses and failures to disclose vulnerabilities. In July, it adopted rules requiring them to disclose within four days all cybersecurity breaches that could affect their bottom lines. Delays would be permitted if immediate disclosure poses serious national-security or public-safety risks.

Victims of the SolarWinds hack whose Microsoft email accounts were violated included the New York federal prosecutors’ office, then-acting Homeland Security Secretary Chad Wolf and members of the department’s cybersecurity staff, whose jobs included hunting threats from foreign countries. (Source: Defense News Early Bird/C4ISR & Networks)

 

31 Oct 23. NATO eyes ‘quantum-resistant’ encryption in 5G drill. NATO member countries have set their sights on securing military 5G communication networks against hacking by adversaries possessing powerful quantum computers. Alliance officials hosted an exercise to that effect earlier this month at a test site in Latvia. The event, dubbed 2023 Next-Generation Communication Network Technologies, was organized by NATO’s Allied Command Transformation and the Latvian defense ministry to present systems capable of enabling multi-domain operations. The term refers to the seamless coordination of land, air, naval, space and cyberspace assets in military campaigns.

One of the focus areas was for demonstrators to showcase approaches to improve command-and control-capabilities with the use of virtual reality, secure post-quantum encryption and apply sensor fusion for situation awareness, according to a press release provided by the organizers.

Scientists have warned for some time of the threat posed by quantum computers to crack common encryption algorithms that protect military hardware and intelligence operations.

The sense of urgency has ushered in the term “quantum-resistant encryption” to describe next-level security mechanics.

Last September, the U.S. National Security Agency (NSA) released the future quantum-resistant algorithm requirements for national security systems. Considering ongoing pursuits in quantum computing by international actors, the report called on industry “to now plan, prepare and budget for a transition.”

NATO governments also have begun testing post-quantum solutions. In 2022, the NATO Cyber Security Centre, responsible for the everyday protection of the alliance networks, successfully tested safe transmission flows using a virtual private network (VPN) supplied by the British firm Post-Quantum.

A VPN can utilize different algorithms provided by the manufacturer to ensure secure communications by guaranteeing that only the appropriate recipient of the data can read it.

Another method allies have experimented with is quantum key distribution, which consists of exchanging encryption keys, only known between the shared parties, that can be used to encrypt or decrypt further communications.

According to a NATO report on the subject, one of the distinct properties of this method is that it allows “only for the intended recipient to decode the message transmitted, making any eavesdropping impossible.”

In 2022, through this approach, a NATO Science for Peace & Security (SPS) project aimed to connect Malta and Italy for the first time with a prototype secure quantum communications undersea link featuring submarine, fiberoptic cables.

While quantum computing technology remains in its infancy, the importance for military organizations and the defense industry to get started now is to discover flaws in algorithms before they spread, thereby preventing widespread vulnerabilities in the future. (Source: Defense News Early Bird/Defense News)

 

01 Nov 23. Improved access to malicious tools on dark web heightens organisations’ risk of infection. Improved access to pre-made malware campaign packages sold on the dark web has increased the number of cyber campaigns using phishing emails to install remote access trojans (RATs) onto devices. These malware “meal kits” contain the ‘Parallax RAT’ and are available for sale for USD 65 per month, allowing more threat actors the ability to conduct cyber operations without needing sophisticated capabilities. The Parallax RAT went from the 46th most popular payload in Q2 2023 to the seventh most popular in Q3 2023, indicating a significant increase in the usage of the meal kits for malicious operations according to research by HP Wolf Security. In Q3 2023, 80% of the threats observed by HP were email-based, underscoring the pervasive risk phishing poses to organisations’ security. As the dark web further commercialises, and access to pre-made malware operations becomes easier to obtain, organisations will almost certainly face an elevated risk of phishing and RAT infections. (Source: Sibylline)

 

31 Oct 23. Aalyria to Study Ultra-High-Speed Earth-Aircraft Optical Communication. Aalyria announces it will study the feasibility of ultra-high speed optical networks that connect aircraft and spacecraft with existing terrestrial fiber networks.

This collaborative study launched with Airbus aims to achieve two distinct objectives: to advance air-to-ground and air-to-air free-space optical communications technologies in order to improve their compatibility with terrestrial fiber networks; and to develop network traffic engineering and orchestration techniques to meet the needs of future air- and spaceborne networks.

In order to reach new markets and deliver new, innovative services, Internet stakeholders are increasingly turning to compelling new network architectures involving the use of air- and spaceborne platforms to extend their infrastructure. These research technologies are at the point of need for the connectivity industry.

“Through the fusion of cutting-edge technology and aerospace innovation, this collaboration is paving the way for a future where aircraft serve natural extensions of terrestrial fiber networks. Aalyria is proud of our joint effort with Airbus to examine potential new services that could be delivered in the future from this fiber network in the sky and create seamless optical connectivity across aerial and terrestrial networks,” said Chris Taylor, CEO at Aalyria.

High-speed and cost-efficient connectivity to aircraft has been a long-standing need in the market. New developments in free-space optics and all-domain network management capabilities, like the ones being developed in the scope of the collaboration, are bringing this vision closer to reality. The research will build upon the strengths that both companies bring to the field of future non-terrestrial networking.

Airbus has been at the forefront of innovation in the aerospace market, and Aalyria has developed a robust set of technologies around a vision of what future global networking will look like. With this effort, Aalyria continues that rich tradition of fostering cutting-edge technologies.

About Aalyria:

Aalyria is a global advanced networking and laser communications technologies company. It is revolutionizing connectivity on Earth and in space. Its Tightbeam product, the world’s first atmospherically corrected coherent free space optics solution, Spacetime, the only all orbit, all domain, software defined network orchestration platform is helping commercial and government customers reimagine and operate new business and mission models to make assets more effective, efficient, and profitable. (Source: BUSINESS WIRE)

 

31 Oct 23. NATO Allied Command Transformation and the Latvian Ministry of Defence Host Next-Gen Communication Networks Technology Event. From October 23rd to October 27th, NATO Allied Command Transformation and the Latvian Ministry of Defence led the “2023 Next-Generation Communication Networks Technology Event” to demonstrate the use of technologies that can enable Multi-Domain Operations within the Alliance.

Defence capabilities are increasingly enhanced by technological advancements like Next-Generation Communications Networks. With the world’s transition to 5G, also known as the fifth generation of telecommunication technologies, NATO Allied Command Transformation is constantly developing new capabilities to contribute to the Military Instrument of Power. Other advanced communication technologies, such as low earth orbiting satellites, have a direct and far-reaching influence on global defence and security.

One of the experiments conducted during this event focused on telehealth. It was spearheaded on behalf of sponsors which include both the Medical and the Communications & Information Services Branches at NATO Allied Command Transformation, and the telehealth panel of the Health Information System and Technologies Working Group of the NATO Committee of the Chiefs of Military Medical Services.

As a discipline, Telehealth is designed to improve access to healthcare, particularly in situations where in-person visits may be challenging, and it can be especially valuable for patients in remote or restricted areas. The specific experiment during this event aimed to explore the application of 5G networks to enable telehealth on the field in military settings, and to compare different telehealth equipment. Two NATO Nations, Germany and Czech Republic, contributed to this experiment.

Another set of trials during this Technology Event involved collaboration from the Innovation Branch of Allied Command Transformation, the NATO Communication and Information Agency, as well as selected partners from Industry and Academia. This scenario-based Multi-Domain Operations experiment presented multiple Emerging and Disruptive Technologies Demonstrations in support of the NATO Digital Transformation priority.

In these trials, Artificial Intelligence-based applications were also used to support Intelligence, Surveillance, and Reconnaissance Assets planning and decision support for military operators. Cloud services from Amazon Web Services, hosted on the event 5G networks, were then employed closer to the tactical users in small deployable servers. The data captured during the experiment will be further analysed to provide detailed insights for the operational and transformational communities to support Allied Command Transformation’s Multi-Domain Operations implementation plans.

Additional demonstrators showcased approaches to improve command and control capabilities including the use of virtual reality, secure post-quantum encryption, sensor fusion for situational awareness, and mitigate impacts for military within a GPS-denied environment. These technologies were worked on by experts from the NATO Communications and Information Agency, NATO nations (such as the Polish Military University and Army Research Lab), and a large contingent of Industry experts. The activities related to Multi-Domain Operations and Digital Transformation addressed a broad catalogue of Emerging and Disruptive Technologies.

As 5G technologies are generally designed for civilian environments, specific adaptation and approaches also had to be considered for military applications. The event also demonstrated solutions to increase interoperability between multi-national forces by using electromagnetic spectrum interference and mobile communications technologies.

“This year we’ve combined Next Generation Communications Network technologies with other technologies to exploit data in a way to improve decision making, push expertise to benefit the warfighter and improve multi-national force interoperability. I think the energy created by the participants working together to accelerate innovation has been the highlight,” said Mr. Warren Low, the Event Lead from NATO Allied Command Transformation.

The Next-Generation Communications Network Event provided a tremendous opportunity for validation and exploration of innovative solutions; the results of the experiments conducted will be used to inform development and operationalization of Digital Transformation and Multi-Domain Operations related concepts and capabilities. Equally important was developing the human expertise and networking which provide the foundations for accelerating development in Next Generation Communications Technologies for the Alliance.

(Source: https://www.defenseadvancement.com/ NATO Allied Command Transformation)

 

31 Oct 23. Kromek receives additional $1m in CBRN orders. Kromek Group plc (AIM: KMK), a leading developer of radiation and bio-detection technology solutions for the advanced imaging and CBRN detection segments, announces that it has secured three further orders totalling over $1m in the CBRN detection segment.

This includes two orders in nuclear security, with one order for the further development of the Group’s bio-security technology. The majority of the revenue will be recognised in the current financial year, which helps to underpin forecasts along with the recent $5.9m contract from the US Department of Homeland Security.

Arnab Basu, CEO of Kromek, said: “Geopolitical insecurity, combined with other global threats, continue to drive demand for our products that contribute to ensuring public safety and security. Governments and their agencies buy our products because they are best-of-breed and we have the ability to deploy rapidly. The receipt of orders from existing customers is testament to the strength of our offer and the value of our products to our customers. We are also pleased to have received an order from a new customer that is a substantial, global defence corporation, which we believe represents a significant opportunity for further sales. With the sustained commercial momentum in CBRN, we look forward to receiving further orders in due course.”

 

30 Oct 23. Beach landing trials help develop future AI capabilities.

One of the largest maritime artificial intelligence data capture trials has taken place in Hampshire, enabling the development of new AI products for Defence.

• One of the largest maritime artificial intelligence data capture trials takes place in Hampshire.
• Enabling the development of new AI products for Defence.
• Strengthening cooperation between industry and international partners.

A large-scale maritime and beach-landing exercise on the Hampshire coast has provided has provided vital data to help develop cutting edge AI products for the Ministry of Defence.

A Defence Science and Technology Laboratory (Dstl) led exercise over five days involved 130 personnel, 13 vessels, multiple uncrewed air vehicles, a light aircraft and more than 50 cameras and sensors to record activity.

Contending with high winds up to 40 knots, landings saw personnel boarding and leaving vehicles in different ways to generate data representative of different behavioural traits.

In one scenario synchronised landings saw participants acting as a trained team such as a military unit. In another, participants exited the boats in a deliberately chaotic way, to provide a wider data sample of human movement.

The trial was a collaboration with 12 industry and international partners, supported by Royal Navy and British Army personnel, and comes ahead of the UK government’s AI Summit over the next few days. Investing in artificial intelligence is paramount to the continued modernisation of our Armed Forces and is a key priority for the UK government.

Minister for Defence Procurement, James Cartlidge, said:  “Investing in new technology provides our Armed Forces with the tools they need to stay ahead of emerging threats and ensures our national security in an ever-evolving technological landscape. Innovative, data driven exercises like this demonstrate how AI can enhance our military capabilities, enabling us to respond more efficiently to the threats of today and tomorrow.”

Data captured during the exercise included visual, infrared, sonar and radar as well as supporting ‘metadata’ including platform and sensor locations, weather, sea states and other contextual information.

The video, imagery and other data captured will be used to build further datasets to train AI algorithms to recognise objects, such as other vessels. Data generated by the trial will also enable the Ministry of Defence and industry partners to develop new AI products for Defence in an ethical, safe, and responsible manner.

Carefully curated datasets are the bedrock to many AI capabilities and the sourcing and integrity of the data is crucial. The data gathered through trials such as this, will be used to validate the performance of future systems providing the operator with confidence in its abilities.

Charlie Maslen, Dstl’s trial technical authority, said:

This was an ambitious and challenging trial which builds on the experience and expertise gained during the previous land-based exercise. Conducting a trial with sensors spanning three domains – land, sea and air – involving 12 separate industry partners was immensely complex. Added to which we were hampered on 2 days by 40 knot winds.

Data generated by the trial will enable MOD and industry partners to develop new AI products for Defence, helping keep UK forces safe and delivering operational advantage. Being able to guarantee the integrity of the data underlines MOD’s commitment to the ethical, safe and responsible use of AI. (Source: https://www.gov.uk/)

 

30 Oct 23. Cyber Innovation Center Awarded $129m in Federal Funding to Boost Louisiana’s Cybersecurity Leadership. The Cyber Innovation Center (CIC), a catalyst for the development and expansion of a knowledge-based workforce, today announced a total of $129m in federal funding to continue industry-leading innovation through CYBER.ORG and STRIKEWERX, its leading subsidiary organizations driving innovation in the region.

This further positions the CIC and the surrounding region as a leading U.S. cybersecurity hub. CYBER.ORG received $34m from the Cybersecurity and Infrastructure Security Agency (CISA) and STRIKEWERX received $95.6 m in funding through a Partnership Intermediary Agreement (PIA) with Air Force Global Strike Command (AFGSC). Both organizations were awarded five-year grants.

The CIC promotes research, education and technological innovation and this federal funding further advances the development of a sustainable workforce that supports the growing needs of government agencies, private industry and academic institutions across the country. Additionally, this investment enables the CIC to continue to drive impact in Louisiana as the nation’s leading cybersecurity hub and make its mark in Washington, D.C.

“The Cyber Innovation Center is honored by the federal government’s investment in our groundbreaking work,” said Kevin Nolten, Vice President of the Cyber Innovation Center. “This funding reflects the commitment that Louisiana and the greater Bossier City region has in advancing research, education, and technological innovation. We look forward to continuing these groundbreaking efforts alongside our advocates on Capitol Hill, federal partners, key industry stakeholders and the local community.”

CYBER.ORG Funding from the Cybersecurity and Infrastructure Security Agency (CISA)

CYBER.ORG’s $34m in funding from the Cybersecurity and Infrastructure Security Agency (CISA) through the Cybersecurity Education and Training Assistance Program (CETAP) grant will help address the nation’s shortage of over 570,000 cybersecurity professionals through expanded nationwide access to K-12 cybersecurity education, continued improvement of cybersecurity literacy, and encouraging students to explore cybersecurity career opportunities. This new funding will also enable CYBER.ORG to support the Biden administration’s National Cybersecurity Workforce and Education Strategy through its commitment of reaching 50,000 educators over the next five years.

CYBER.ORG has partnered with CISA since 2012 to empower educators to teach cybersecurity confidently through curricular resources and professional development, resulting in students with the skills and passion needed to succeed in the cybersecurity workforce. Currently, CYBER.ORG has over 30,000 teachers across all 50 states and four U.S. territories enrolled in its content platform, reaching ms of students nationwide.

“Thanks to our funding and long-time partnership with CISA, CYBER.ORG is more dedicated than ever to improving access to cybersecurity education,” said Laurie Salvail, Director of CYBER.ORG. “We are committed to developing the next-generation cybersecurity workforce and are excited to continue our critical work alongside other innovative partners at the Cyber Innovation Center.”

STRIKEWERX Funding from Air Force Global Strike Command (AFGSC)

STRIKEWERX was awarded $95.6m in funding through a Partnership Intermediary Agreement (PIA) with AFGSC enables the organization to serve as the Command’s persistent technology transfer, technology transition, and innovation resource. With collaboration space in the heart of the Ark-La-Tex and proximity to Barksdale Air Force Base, STRIKEWERX is an innovation arm of the AFGSC Office of the Chief Scientist.

Entering its seventh year of operations, AFGSC has realized a five-fold return on its investment with nearly a quarter-of-a-bn-dollar impact. This impact will continue to grow, and see new developments such new Design Sprints to quickly prototype solutions, challenge events to provide market research for latest technology, and event expansion of the STRIKEWERX Innovation Hub to include an Innovation Lab for Airmen to turn their ideas into physical prototypes.

“The continuation of our PIA to 2033 proves it is successfully fielding innovation for the command,” said Jeff Beene, Director of the Partnership Intermediary Agreement. “From data-driven decision tools and expanded software automation to advanced learning technologies and augmented reality advances that improve training, new capabilities for the AFGSC warfighter now exist. This impact would not be possible without the AFGSC Chief Scientist Office and our congressional delegation, who understand the importance of new technology to the strategic mission of AFGSC and our national security.”

“From the STRIKEWERX Innovation Hub opening amidst the COVID pandemic to the new expansion of our Innovation Lab, the CIC has proven its investment in the local, state, and national defense community to positively affect national security,” said Russ Mathers, Director of STRIKEWERX. “Our current Counter Small Unmanned Aerial Systems Swarm Defeat Challenge is a great example of how we are seeking industry, small businesses, inventors, and academia throughout our region, state, and country to impact the command. This new agreement will allow us to accomplish more efforts like this.”

For more information about the CIC, visit http://www.cyberinnovationcenter.org. For more information about CYBER.ORG, visit www.cyber.org. For more information about STRIKEWERX, visit www.strikewerx.com.

About the Cyber Innovation Center

The Cyber Innovation Center (CIC), located in Bossier City, Louisiana, is the anchor of the 3,000-acre National Cyber Research Park and serves as the catalyst for the development and expansion of a knowledge-based workforce throughout the region. As a 501c3 not-for-profit corporation, the CIC fosters collaboration among its partners and accelerates technology, research, and development. One of its primary missions is to develop a sustainable knowledge-based workforce that can support the growing needs of government, industry, and academic partners. Learn more at cyberinnovationcenter.org.

About CYBER.ORG

CYBER.ORG is a cybersecurity workforce development organization that targets K-12 students with cyber career awareness, curricular resources, and teacher professional development. The United States Department of Homeland Security (DHS) supports CYBER.ORG through a grant from the Cybersecurity and Infrastructure Security Agency (CISA) to develop and distribute cybersecurity education content to educators across the country at no cost. Currently, more than 30,000 teachers across all 50 states and four U.S. territories are enrolled in the CYBER.ORG content platform. For more information, please visit http://www.cyber.org.

About STRIKEWERX

With collaboration space in the heart of the Ark-La-Tex and proximity to Barksdale Air Force Base, STRIKEWERX is an innovation arm of the AFGSC Office of the Chief Scientist. It connects people and resources across government, industry and academia to solve rapidly create solutions that directly benefit the warfighter and aid in revitalizing the Air Force nuclear enterprise as the technology transfer, technology transition, and innovation resource. For more information, visit https://www.strikewerx.com/ (Source: BUSINESS WIRE)

 

30 Oct 23. Pre-existing software vulnerabilities sustain risks to unpatched organisations, supply chains. On 27 October, security company Kaspersky released a report on a Lazarus campaign that repeatedly infected a software vendor via existing software vulnerabilities in a likely supply chain operation. The North Korean threat actor, Lazarus Group, conducted a series of attacks against various victims by exploiting legitimate security software used to encrypt web communications through digital certificates. The group installed malware (‘SIGNBT’ and ‘LPEClient’) to establish persistence and a command and control (C2) connection during the campaign. The threat group sought to run additional payloads and steal credentials as well as other information beneficial to its goals. Lazarus exploited pre-existing software vulnerabilities to infect an unnamed software vendor multiple times, highlighting the organisation’s inadequate cyber security practices. Its continued use of vulnerable software enabled the threat group to target the company’s supply chain. Lazarus will remain a persistent risk to global businesses as the group continues to utilise advanced techniques to evade detection and further develops to maintain frequent operations. (Source: Sibylline)

 

27 Oct 23. Cyber Update.

Key points

• A sophisticated cyber espionage operation, ‘TetrisPhantom’, is exploiting compromised secure USB drives to target government entities in the Asia-Pacific region (see Sibylline Cyber Daily Analytical Update – 23 October 2023).
• A new version of the banking trojan ‘Grandoreiro’ is being used in  credential-theft operations against targets in Spain and Mexico (see Sibylline Cyber Daily Analytical Update – 24 October 2023 and our Technical analysis below).
• Ransomware attacks continue to pose elevated risks for businesses; there was an 11% increase in attacks in Q3 2023 compared to Q2 (see Sibylline Cyber Daily Analytical Update – 25 October 2023).
• The Russian threat group ‘Winter Vivern’ exploited a zero-day vulnerability to target government entities and think tanks in Europe (see Sibylline Cyber Daily Analytical Update – 26 October 2023 and our Technical analysis below).
• An English-speaking financially motivated threat group is now an affiliate of the ‘BlackCat’ ransomware threat group (see Sibylline Cyber Daily Analytical Update – 27 October 2023).

Technical analysis of weekly stories

Grandoreiro is a banking malware that is written in Delphi; the source code is reused in multiple strains of banking trojans originating from Brazil and used across Latin America. Other Delphi-based banking trojans include Casabeniero, Javali and Mekotio. Grandoreiro is typically delivered via a phishing email with lures, including shared documents, Nota Fiscal Electronicos (a type of tax form in Brazil) and/or utility bills. Upon clicking the malicious link in the email, a loader then runs; it uses DLL side-loading to inject malicious activity into legitimate programmes which download and install the Grandoreiro trojan onto the device being used. A new iteration of the campaign targeting entities in Spain, in addition to Brazil and Mexico, uses the same version of the malware’s infrastructure that allows TA2725 to target multiple regions simultaneously without needing to modify the malware.

Some non-exhaustive recommendations to mitigate this threat include:

• Monitor network devices for suspicious traffic and activity
• Ensure there are adequate security detection measures in place, including end-point detection and response (EDR) solutions (such as anti-virus software)
• Conduct cyber hygiene awareness courses for users to enable them to recognise and report phishing attempts; urge them not to click on anything from an unknown or untrustworthy source
• Monitor bank accounts for suspicious activity and consider changing passwords frequently to reduce the impact of stolen credentials

The Russian state-sponsored threat actor ‘Winter Vivern’ used a zero-day vulnerability in Roundcube’s Webmail server to target government and think tank entities in Europe. To exploit the vulnerability (CVE-2023-5631), the actors can remotely send an email purporting to be from a legitimate Microsoft account. While the email does not contain a malicious link or attachment, the HTML source code contains a payload that runs when a user reads the email. Subsequently, a JavaScript code is loaded onto the user’s Roundcube browser window; this allows the threat actor to access the server. The vulnerability is a XSS vulnerability that affects a server-side script which does not sanitise malicious SVG documents and is effective even on patched Roundcube instances. Vulnerable versions include 1.6.x before 1.6.4, 1.5.x before 1.5.5 and 1.4.x before 1.4.15; however, Roundcube released a patch for this zero-day on 14 October.

Some non-exhaustive recommendations to mitigate this threat include:

• Monitor network devices for suspicious traffic and activity
• Ensure there are adequate security detection measures in place, including EDR solutions (such as anti-virus software)
• Apply released patches to address the zero-day vulnerability as soon as possible to prevent unnecessary exploitation
• Conduct incident response investigations related to zero-day vulnerabilities to ensure exploitation has not occurred, even if a patch is applied
• Monitor administrative accounts for any suspicious activity and/or unauthorised privilege escalation

Frequency of TTPs during this monitoring period: LOW frequency, MODERATE frequency

The MITRE ATT&CK framework is a globally accessible documented collection of information detailing the malicious behaviours of cyber threat actors; it is used as the foundation for organising the processes which threat actors execute during cyber operations. It provides an encyclopaedic reference for organisations, highlighting the tactics, techniques and procedures (TTPs) cyber actors use in campaigns, while also providing suggestions for detecting and mitigating against specific TTPs to bolster organisations’ security mechanisms. The framework organises a threat actor’s entire operational lifecycle from reconnaissance to exfiltration and impact.

Word(s) of the wee This week’s cyber word(s) of the week: Payload (Source: Sibylline)

 

27 Oct 23. Bittium Wireless Ltd, a Subsidiary of Bittium Corporation, and the Finnish Defense Forces Prepare a Framework Agreement on Tactical Communications Products. The Finnish Minister of Defense, Mr. Antti Häkkänen has authorized the Finnish Defense Forces to sign a Framework Agreement with Bittium Wireless Ltd, a subsidiary of Bittium Corporation, on the purchase of the software-defined radio based Bittium Tactical Wireless IP Network™ (TAC WIN) system’s products and Bittium Tough Comnode™ communication devices and related accessories. The Framework Agreement would concern the years 2023-2028 and the products would be in use in all three service branches of the Defense Forces. The procurement authorization for the Framework Agreement would have a maximum value of EUR 51.6 m (excluding VAT). Based on the Framework Agreement, the Finnish Defense Forces would issue separate purchase orders in several batches during the validity period of the Agreement. The Framework Agreement will not change Bittium’s financial outlook for the year 2023 (updated on September 15, 2023).

The previous Framework Agreement between Bittium and the Finnish Defense Forces for the products of the TAC WIN system covered the years 2021–2024 and had a total maximum value of approximately EUR 30 m, and the Framework Agreement for Tough Comnode devices covered the years 2018–2022 and had a maximum value of EUR 8.3 m. The maximum order quantities according to both Framework Agreements have been realized in full.

Bittium TAC WIN is a high-performance communications system for various use cases of defense forces, offering a broadband IP network connection to mobile communication stations and command posts. The system supports the combat doctrine of the Finnish Defense Forces, where mobility and commanding troops on the move as well as effective communications play a key role. The resilient and modular system is used by all three service branches of the Finnish Defense Forces.

The versatile Bittium Tough Comnode device fulfills the data transmission needs of the mobile troops of the Finnish Defense Forces, for example as a VoIP phone (Voice over IP), IP router (Internet Protocol) and SHDSL repeater (Symmetrical High-speed Digital Subscriber Line). The devices are used by all three service branches of the Finnish Defense Forces.

————————————————————————-

Spectra Group (UK) Ltd

 

Spectra Group (UK) Ltd, internationally renowned award-winning information security and communications specialist with a proven record of accomplishment.

 

Spectra is a dynamic, agile and security-accredited organisation that offers secure Hosted and Managed Solutions and Cyber Advisory Services with a track record of delivering on time, to spec and on budget.

With over 15 years of experience in delivering solutions for governments around the globe, elite militaries and private enterprises of all sizes, Spectra’s platinum and gold-level partnerships with third-party vendors ensure the supply of best value leading-edge technology.

Spectra was awarded the prestigious Queen’s Award for Enterprise (Innovation) in 2019 for SlingShot.

In November 2017, Spectra Group (UK) Ltd announced its listing as a Top 100 Government SME Supplier by the UK Crown Commercial Services.

Spectra’s CEO, Simon Davies, was awarded 2017 Businessman of the Year by Battlespace magazine.

Founded in 2002, the Company is based in Hereford, UK and holds ISO 9001:2015, ISO 27001:2013 and Cyber Essentials Plus accreditation.

————————————————————————-