Sponsored by Spectra Group
————————————————————————
29 Feb 24. Spectra Group awarded global distribution rights for Comtech’s Troposcatter Family of Systems. Spectra Group, a specialist provider of secure voice, data and satellite communications systems, has been awarded the global distribution rights for Comtech’s Troposcatter Family of Systems (FoS) which includes the 500-Watt Mobile Transportable Transmission System (MTTS), the more mobile 10-Watt Compact Over-the-Horizon Mobile Expeditionary Terminal (COMET), and other new next generation troposcatter systems.
The 5-year agreement appoints Spectra Group in all areas globally, except for the USA, Canada and Mexico which is retained by Comtech.
Spectra Group was first appointed by Comtech as UK and NATO Special Operations Forces (SOF) agents in September 2019. Since then, Spectra Group has announced multiple orders for Comtech’s Troposcatter FoS including UK Navy (Royal Marines) in March 2022, HQ ARRC in March 2023, 3 (UK) Division in September 2023 and an overseas customer. In October 2023, Spectra Group placed a USD$20M plus order with Comtech to service multiple orders already received, and several expected follow-on orders from undisclosed customers in the NATO and European regions.
The Troposcatter FoS, developed by Comtech, provide high capacity, low-latency data links for over-the-horizon communications utilizing Comtech’s state-of-the-art CS67PLUS troposcatter radio/modem, without the need to rely on satellites or multiple line-of-sight repeaters. The Troposcatter COMET system, in particular, is ideal for providing a secure big data network for deployed headquarters from divisional down to company level because it is small and lightweight. Due to its low power and directional nature, it is also difficult to detect and deny. It uses a maximum transmit power of 10-watts and only needs a 1-meter dish, but still has low latency (typically 9-20mS) and large bandwidth (5-60Mbps) while optimized for data links up to 60 km and beyond. In practice, data transfer speeds can be much greater (the CS67PLUS operates up to 105 Mbps single stream and 210 Mbps dual stream operation) and data links can be effective up to 100kms+ on the COMET, depending on the environment. The system is simple, intuitive, and easy to set up (15 minutes). Critically, it is also satellite independent and can work in a GPS/GNSS denied environment (including polar regions) making it ideal for use during Peer-on-Peer conflict and when Multi Domain Integration is required.
Since March 2022, Comtech’s Troposcatter COMET has been available on the NATO Catalogue via the NATO Support Procurement Agency (NSPA), so any NATO country can purchase directly without having to endure a long tender process. For the rest of the world, the Troposcatter FoS can be purchased directly from Spectra Group or via Comtech for North America.
Simon Davies, CEO of Spectra Group said: “Spectra is delighted to have expanded our distribution region for this excellent product that perfectly complements our own SlingShot satellite communication system. We have been working closely with Comtech for the last 4 years and our recent sales successes are testament to the value of that partnership. With increasing state-level global threats to communications and the potential for denied or degraded satellite services, we need to maintain focus on innovation and diversification. The fresh development of robust, reliable and effective Troposcatter technologies opens up the opportunity to offer multiple long-range, secure communications solutions that don’t rely exclusively on satellite systems and we are very happy to be at the forefront of these developing technologies.”
Ken Peterman, Comtech’s President and CEO said, “With the most deployed Troposcatter systems in the world, our FoS are uniquely designed to provide U.S. and coalition forces with an information advantage across all domains. We are thrilled to partner with Spectra Group to expand access to Comtech’s FoS and deliver our marketing leading beyond-line-of-sight (BLOS) troposcatter technologies to coalition forces operating across the globe. It was an easy decision to partner with Spectra Group given the company’s trust in the industry and deep understanding of how command, control, computers, communications, cyber, intelligence, surveillance, and reconnaissance (C5ISR) will evolve to meet the mission needs of today and in the future.”
Spectra has a proven record of accomplishment – with over 15 years of experience in delivering solutions for governments around the globe; elite militaries; and private enterprises of all sizes. As a dynamic, agile, security accredited organisation, Spectra can leverage this experience to deliver Cyber Advisory and secure Hosted and Managed Solutions on time, to spec and on budget, ensuring compliance with industry standards and best practices. Spectra’s gold-level partnerships with third-party vendors ensure best value and leading-edge technology is used. On 23 November 2017, Spectra Group (UK) Ltd announced that it had been listed as a Top 100 Government SME Supplier for 2015-2016 by the UK Crown Commercial Services. Spectra Group (US) Inc. was established in 2018 to directly support the US market.
Spectra Group were awarded the 5-year contact to be the UK distributor of Troposcatter COMET for US company Comtech Systems Inc. in mid-2019. Comtech is a leading global provider of next-generation 911 emergency systems and critical wireless and satellite communication technologies.
Spectra’s CEO, Simon Davies, was awarded 2017 Businessman of the Year by Battlespace magazine.
Spectra was awarded the prestigious Queen’s Award for Enterprise (Innovation) in 2019 for SlingShot. Founded in 2002, the Company is based in Hereford, UK and holds ISO 9001:2015, ISO 27001 and Cyber Essentials Plus accreditation.
www.spectra-group.co.uk
About Comtech
Comtech Telecommunications Corp. (Comtech) is a leading global technology company providing terrestrial and wireless network solutions, next-generation 9-1-1 emergency services, satellite and space communications technologies, and cloud native capabilities to commercial and government customers around the world. Our unique culture of innovation and employee empowerment unleashes a relentless passion for customer success. With multiple facilities located in technology corridors throughout the United States and around the world, Comtech leverages our global presence, technology leadership, and decades of experience to create the world’s most innovative communications solutions. For more information, please visit www.comtech.com.
29 Feb 24. Global: New vulnerabilities point to elevated phishing, social engineering risks for firms. On 28 February, the cyber security company Cisco Talos disclosed multiple vulnerabilities in the popular PDF reader application Adobe Reader. Three of these vulnerabilities (CVE-2024-20731, CVE-2024-20729 and CVE-2024-20730) can be exploited by threat actors seeking to execute their own malicious code onto a target system without user permission. A typical campaign begins with a phishing or social engineering operation that coerces a victim into opening a malicious PDF file. Once opened, the malicious code is leveraged to conduct a buffer overflow attack, allowing an actor to override the programme execution mechanism on a system and to execute their own malicious code. Phishing remains the most potent attack vector used by threat actors to infiltrate organisations; they provide threat actors with a low-effort, high-reward technique to achieve their objectives. Subsequently, we assess that there is a realistic possibility that these new vulnerabilities will be exploited in phishing and social engineering attacks in the short-to-medium term. (Source: Sibylline)
28 Feb 24. Global: Active exploitation of new vulnerabilities underscores increased supply chain risks to firms. On 27 February, international news outlets reported that the ‘Black Basta’ and ‘Bl00dy’ ransomware groups are actively exploiting two recently discovered vulnerabilities (CVE-2024-1709 and CVE-2024-1708) in the popular remote desktop application ScreenConnect. The most critical flaw (CVE-2024-1709) allows threat actors to delete all users, effectively acting as a system administrator, and thereby taking control of all devices in a network. Both ransomware groups have exploited this vulnerability to gain access to victims’ networks, subsequently escalating their privileges and encrypting files for financial gain. Threat actors looking to garner illicit profit are quickly evolving their tactics, techniques and procedures (TTPs) to leverage weaknesses in third-party software, emphasising the growing risk posed by software supply chains to firms. Despite the recent law enforcement crackdown, ransomware groups continue to flourish, underscoring the persistent threat posed by ransomware to business continuity. ConnectWise released a patch for the vulnerabilities (version 23.9.8) that addresses all affected on-premise versions (up to and including 23.9.7) (Source: Sibylline)
28 Feb 24. North Korean Hackers Target Global Defense Sector in Supply-Chain Attack. Germany and South Korea’s intelligence agencies have alerted the international community to a sophisticated cyber-espionage operation orchestrated by North Korean government-backed hackers. This operation primarily targets the defense sector, with the aim of acquiring sensitive military technology information. The campaign has been linked to the notorious North Korean Lazarus group, known for its advanced persistent threats (APTs) and cyber-espionage activities. The advisory detailed two distinct cases of cyberattacks attributed to these North Korean actors. The first case involved a supply-chain attack against a maritime and shipping technologies research center. The attackers compromised the web server maintenance firm associated with the target, utilizing a series of steps that included stealing SSH credentials, employing legitimate tools for malicious purposes, and conducting lateral movement across the network. Their tactics involved downloading malicious files, stealing employee credentials, and attempting to remain undetected within the targeted infrastructure. Despite their efforts to distribute a malicious patch file, their actions were thwarted by the organization’s genuine security manager. To counter such attacks, the advisory recommends implementing stringent security measures. These include limiting remote access for IT service providers, closely monitoring access logs, enforcing multi-factor authentication (MFA), and adopting rigorous authentication policies for patch management systems. (Source: https://www.sofx.com/)
26 Feb 24. Sensor solutions provider HENSOLDT has announced that its EuroNav 7 mission system for critical airborne applications is now enhanced with the integration of Smith Myers’ award-winning ARTEMIS Mobile Phone Detection, Location, and Communication System.
“This is a winning combination that is making waves in the avionics industry. Tailored for the helicopter elite, this powerhouse duo is more than just a tool. It’s an exclusive pass to a new level of control and safety”, says Michael Gröninger, Managing Director of HENSOLDT Avionics.. “This partnership of proven systems is targeting expansion worldwide across a growing customer base deploying essential systems for Search and Rescue (SAR) missions, where every move is executed with precision.”
EuroNav 7, integrated with ARTEMIS, stands out in its ability to identify, locate and interact with cell phones. This feature not only enables effective help for people in distress, but also provides first-class support in disaster control and in the fight against people smuggling and supporting other maritime patrol operations. The system also detects the cell phone’s country of origin making it the perfect tool for detecting border intrusions.
“ARTEMIS interacts with and geolocates the cell phone quickly and precisely using the cellular protocol itself. EuroNav 7 displays this information and enables the automatic steering of other sensors onto the cell phone’s location. The location of thousands of handsets can be established very quickly and displayed on EuroNav 7,” explains Andrew Munro, Managing Director of Smith Myers.
EuroNav takes the lead by integrating a full range of operational features that perfectly complement the ARTEMIS system. This combination is now available via the off-the-shelf EuroNav 7 product, making it the ultimate in operational excellence.
- Precision Identification and Location: EuroNav 7 with ARTEMIS allows aircrew to precisely identify and locate cellular handsets with unmatchable speed.
- Enhanced Situational Awareness: The combination of mass mapping and geofencing from ARTEMIS in EuroNav 7, facilitates operations in complex environments.
- Extended Range and Flexibility: With a range of over 30 km, ARTEMIS and EuroNav 7 extend the limits of use allowing the sensor suite to “see further quicker, and more accurately”. (Source: defensearabia.com)
27 Feb 24. DSTA Strengthens Partnership With Lockheed Martin To Advance Data Analytics In Data Pipe Infrastructure. Singapore’s Defence Science and Technology Agency (DSTA) and Lockheed Martin (NYSE: LMT) entered into an agreement on 22 February 2024 to implement a new data pipeline infrastructure to facilitate the seamless exchange of digitalised fleet and supply chain datasets. This will allow for improved data analytics insights for the optimisation of aircraft maintenance support, leading to reduction in sustainment cost, improvement in overall fleet availability and enhanced operational readiness for the Republic of Singapore Air Force.
Established on the sidelines of the Singapore Airshow, this announcement follows the collaboration agreement signed between both organisations in March 2023.
“We are glad to further strengthen our collaboration with Lockheed Martin, and establishing a new data pipeline reflects a shared commitment to leverage digital technologies to enable smarter maintenance support for our aircraft,” said DSTA’s Director Air Systems, Mr Ang Jer Meng.
“This is what engineering for Sustainment looks like in action. Through this agreement, Lockheed Martin will be better positioned to meet the needs of DSTA, now and for the years to follow,” said Steve Sheehy, Vice President for Sustainment Campaigns at Lockheed Martin. “Together, we will be able to analyze and implement solutions to improve maintenance of the Republic of Singapore Air Force F-16 fleet.” Sheehy added: “Lockheed Martin’s 21st Century Security vision aims to deliver integrated mission-focused defence capabilities by innovating with urgency, and this agreement enables collaboration towards that vision.”
27 Feb 24. Strategic Command shares cyber expertise with Japan. A delegation from the Japanese Cyber Defense Command met with cyber experts at various Strategic Command locations. Leading cyber is one of the core priorities for Strategic Command, including sharing our expertise and knowledge with international partners to help protect global security. Major General Akisugu Kimura, Commander of the Cyber Defense Command, visited the UK to learn more about Strategic Command’s role at the forefront of digital capabilities within Defence. This is of particular importance to Japan which has committed to boost their number of cyber operators from 800 to 4,000 by 2027. The Major General and General Jim Hockenhull, Commander Strategic Command, met in Whitehall to reinforce both nation’s commitment to working closely together. The meeting follows General Hockenhull’s visit to Tokyo last year, during which he discussed regional threats with officials from across the Japan Self-Defense Forces . Visiting Corsham, the Major General met personnel actively working on the digital frontline and Director Operations Rear Admiral Nick Washer. Our commitment to develop skills within the digital space was evidenced during a tour of the Defence Cyber Academy that offers world-leading training across the Armed Forces. The UK’s relationship with Japan was strengthened in May 2023 when Prime Ministers of both nations signed the Cyber Partnership agreement and the landmark Hiroshima Accord. The Hiroshima Accord is an ambitious global strategic partnership covering defence, trade, science and technology collaboration, and working together to tackle global issues like climate change. (Source: https://www.gov.uk/)
27 Feb 24. TELIT CINTERION Partners With THALES.
- Telit Cinterion, an end-to-end IoT solutions enabler, integrated Thales Instant Connect (TIC) services in its IoT modules for remote eSIM activation.
- Comprised of a Thales eSIM with integrated TIC client, the solution enables instant worldwide activation of IoT eSIMs. It is extremely useful for industrial devices such as smart meters, security systems, healthcare equipment, and payment systems.
- Aidon, a leading provider of advanced smart metering and smart grid solutions, is the first customer to deploy Telit Cinterion eSIM provisioning services with TIC.
Telit Cinterion IoT modules featuring Thales Instant Connect can be remotely activated for cellular connectivity at the time of device installation or during in-field operation. This streamlines IoT deployments as it simplifies supply chain, device installation and maintenance, helping to keep IoT devices connected anywhere, and at all times. Aidon, a leader in smart metering solutions, is the first to benefit from this partnership and solution, deploying IoT modules and initial connectivity from a single vendor, Telit Cinterion.
By integrating Thales technology into Telit Cinterion modules, enterprises can enjoy instant out-of-the-box connectivity activation irrespective of the grid of available mobile networks. The collaboration between the two companies on this innovative solution enables them to get their IoT connected products in the market quickly, allowing them to reap the benefits of digital transformation that is at the core of the IoT promise.
The way the solution works is that, at the end of device production or when it is deployed in the field, the Telit Cinterion module uses the initial connectivity provided by Thales Instant Connect, to download the target local connectivity from the network operators selected by the IoT service provider. This allows device manufacturers and service providers to postpone selecting a connectivity provider until after the device is manufactured and throughout the deployment process. It can also be used during in-field operation, enabling deployed devices to stay connected throughout unexpected cellular network outages. This flexibility is particularly beneficial in situations where the devices are deployed across different regions or countries, as it allows for seamless integration with local network operators.
“Helping our enterprise customers to quickly launch and monetize IoT is our mission at Telit Cinterion. Adding the Thales eSIM to our modules in combination with our SIM provisioning and global MVNO services to streamline the final connectivity provider selection is a game changer in the industry. This powerful solution delivers unparalleled adaptability to changing circumstances and simplifies supply chain and logistics because it is based on a single eSIM with Thales Instant Connect, which can be shipped anywhere in the world,” said Manish Watwani, Chief Marketing and Product Officer at Telit Cinterion.
“The IoT eSIM solution is an important innovation, ensuring production flexibility and connectivity of our smart meters, even in rural areas, and all without the need for physical handling of SIMs. The solution provides a true operator selection and provisioning at any stage of the product lifetime. It is improving our ability to get smart meters connected, stay connected and adapt to new metering as-a-service business models,” said Petri Ounila, Director, IoT Devices, Aidon.
“Thales aims to support IoT adopters and streamline device deployment with our eSIM with initial connectivity via Thales Instant Connect service. This simplifies and accelerates large scale IoT deployments for device makers, benefiting all stakeholders in the value chain. Thales is pleased to work with Telit Cinterion to support its success in cellular connectivity and speed up device deployment” said Guillaume Lafaix, Senior Vice President Mobile Connectivity Solutions at Thales.
26 Feb 24. A Consortium Led by Bittium Wireless Ltd, a subsidiary of Bittium Corporation, and Lockheed Martin Have Signed a Frame Agreement to Develop Tactical Networks’ Situational Awareness.
The framework agreement has been signed as part of the indirect industrial cooperation for Finland’s F-35 program.
The members of the research and business consortium led by Bittium Wireless Ltd, a subsidiary of Bittium Corporation, have signed a framework agreement as part of the indirect industrial cooperation related to the procurement of F-35 fighter jets with Lockheed Martin. In the three-year-project, the members of the consortium and Lockheed Martin will jointly develop methods and capabilities for spectrum usage, which improves the ability to form a tactical situational picture. The other members of the consortium led by Bittium are the technology research center VTT Oy, and Huld Oy, which offers technological solutions for the space industry, among other things. The framework agreement applies to the years 2024–2026 and its total value is approximately USD 3.7 m distributed among the consortium member companies in proportion to the amount of work done.
The goal of the project is to develop data transfer capabilities on the battlefield in different conditions. One example of this is developing the ability to observe and identify different phenomena, which affects spectrum management and the creation of situational awareness. The project will be used to develop the combat resistance of Bittium’s Tactical Wireless IP Network™ (TAC WIN) and Bittium Tough SDR™ radios. The Finnish Defence Forces will also benefit from the cooperation, as the performance of the products they use will be improved with the help of new functionalities.
“The start of cooperation with Lockheed Martin is an important step for Bittium, offering us the opportunity to develop our already strong expertise in tactical communications in cooperation with key players in the international defense market. The development project further strengthens the data transfer capacity of our tactical communication systems in demanding combat situations. The responsibility of leading this consortium has a significant role in our Defense & Security Business Segment’s internationalization strategy, offering a good starting point for other possible cooperation projects in the future as well,” says Tommi Kangas, Senior Vice President, Defense & Security Business Segment.
Through indirect industrial cooperation projects, Lockheed Martin builds industry partnerships with indigenous companies, which offer opportunities to develop and promote global cooperation far into the future.
26 Feb 24. Trellis Data expands to Adelaide. Canberra-based Artificial Intelligence (AI) and Machine Learning (ML) company Trellis Data is expanding into Adelaide, South Australia. This expansion follows the company’s recent opening of an office in Washington DC and marks a significant milestone in its strategy to deliver sovereign AI solutions to the Australian government and defence clients, the company says.
Trellis Data uses AI technologies, including generative AI, to enhance computer vision for object detection such as detecting shipping containers on boats and reading the graphics on them; and facial and vehicle recognition using its own Decision-Making At The Sensor (DMATS). The DMATS system enables a user to train a sensor to look for specific events or objects such as a vehicle, sound, hand signal, even a written or spoken key word, and issue an immediate alert.
It also specialises in developing accurate speech-to-text models designed for both translation and transcription. The Trellis Secure Speech application offers features such as automatic speaker and language identification. At the Milcis show late last year, Trellis Data unveiled a Universal Translator it is trialling with Adelaide-based CODAN Communications. This new technology is slated to help solve some of the challenges of real-time translation in the field
Trellis Data is recognised as a leader in explainable AI technology, says the company, and builds solutions that help a user understand how a response was generated. The company’s AI system is able to explain how it arrived at a particular decision and, uniquely, helps maintain a client’s corporate knowledge by producing a secure summary of everything the organisation knows about a specific topic without any external inputs.
“We know the government is looking for local solutions that meet their changing needs,” said vice president Mark Ryan, a former RAAF WGCDR and Defence Industry Adviser at the Office of Defence Industry Support (ODIS). “Crucially, investing in a local partner will yield huge returns in the future, upskilling local talent and developing an AI sector that can play a leading role on the global stage.”
Trellis Data addresses some of the important concerns that exist when adopting new AI technologies, by specialising in secure, disconnected AI applications that seamlessly integrate with existing business systems, said Ryan.
“We’ve spoken to many CEOs and continue to hear the same thing: that integrating sensitive data is of the utmost importance. There are many agencies looking to leverage the latest AI technologies, but they want to ensure they maintain control of their data and don’t see it go abroad. Australian businesses must fiercely protect their intellectual property and Trellis Data is at the forefront of providing industry-leading, secure AI solutions,” said Mr. Ryan.
Adelaide’s new LOT 14 precinct has been earmarked as a possible future home and comes with plans to grow the current team by 300 to 500 experienced professionals over the next five years. The move is also expected to inject an additional $100m into the South Australian economy and boost its emerging tech industry. (Source: https://www.ex2.com.au/news/)
23 Feb 24. Chinese Security Firm Leak Exposes Hacking Operations. In a significant security breach, Chinese police are probing the unauthorized leak of documents from I-Soon, a private security firm with connections to China’s Ministry of Public Security and other government sectors. The leak, comprising hundreds of pages of contracts, marketing materials, product manuals, and client lists, uncovers the company’s extensive hacking and surveillance activities targeting both Chinese citizens and foreigners. Notably, the documents detail efforts to monitor ethnic minorities and dissidents in regions like Hong Kong and Xinjiang, as well as hacking operations across Asia, including Taiwan.
The leaked materials, verified by cyber security experts, showcase the company’s capabilities in cyber espionage, revealing methods used to infiltrate networks in Central and Southeast Asia, compromise social media accounts outside China, and conduct surveillance on dissidents overseas. The company, founded in 2010 and known as Anxun in Mandarin, also offered tools for breaking into email accounts and disguising online activities of Chinese agents abroad. The extent of the leak, which includes information on hacking tools and databases of hacked data sold to Chinese police, underscores the global reach of China’s cyber operations.
Cybersecurity analysts have highlighted the leak’s significance, pointing to I-Soon’s role in supporting China’s cyber espionage and surveillance efforts. The company’s activities align with China’s broader strategy of using private contractors for hacking operations, extending state control and surveillance beyond its borders. The investigation into the leak’s source continues, with speculation ranging from rival intelligence services to internal whistleblowers. This incident sheds light on the intricate network of state-sponsored hacking and surveillance that supports China’s security apparatus, raising concerns about privacy, human rights, and international cybersecurity. (Source: https://www.sofx.com/)
26 Feb 24. Lockheed Martin continues to integrate combat systems on LCS warships. A number of vessels that remain in the US Navy’s littoral combat fleet, as well as large uncrewed surface vessels, will undergo further combat system integration. The US Navy made its latest move in a long-standing policy of keeping its Littoral Combat Ships (LCS) running at a time of need.
As the original equipment manufacturer of the Freedom class LCS – one of two hull designs – Lockheed Martin gained an $8.1m modification contract on 16 February 2024 to perform combat system ship integration services and test them on the warships as well as the US Navy’s Large Uncrewed Surface Vessels (LUSVs).
All parties expect the work to be completed by February 2025.
Naval Technology has approached Lockheed Martin for details about the modification; the contractor says it is currently pursuing US Government approval to authorise the release of the information.
Reduction of the LCS fleet
There are two LCS designs: Lockheed Martin’s Freedom class is a high-speed, semi-planing mono-hull, while the General Dynamics Independence class design is a trimaran with a slender stabilised mono-hull.
Originally, the US Navy hoped to operate 32 LCS units, however the service has reduced the fleet to 23 ships.
The LCS programme represents a reduction in time to acquire, design, and build ships in comparison to any previous ship class. A total of 11 Freedom vessels are currently commissioned and 14 commissioned Independence commbatants. FY 2019 was the final year programmed for LCS seaframes.
The original number of LCSs have fallen, with seven ships retiring over the next three years in addition to the four retired in 2023; all of the ships to be retired would be less than 10-years-old.
The last LCS to be christened was the Freedom-class vessel USS Cleveland (LCS 31) in April last year, which the Navy says is currently in the “pre-production phase”. Whereas, the last LCS to be commissioned was another Freedom-class vessel, the USS Marinette (LCS 25), in mid-September 2023, which has been delivered to the Navy and is currently based in Mayport, Florida.
Changing focus in LCS sustainment
In the second half of 2023, Northrop Grumman, acting as a subcontractor, was tasked with sustaining the mission modules (MMs) for the LCS fleet as a whole. MMs are systems that provide specific capabilities to the LCS, including vehicles, sensors and weapons.
The Navy will use LCS MMs to counter a range of surface and undersea warfare capabilities – for which GlobalData indicates substantial growth in these defence markets.
Now, Lockheed’s modification will look more broadly at the combat system in which all the MMs are integrated. The specific work to be done currently remains undisclosed, pending Government authorisation.
Integrating the US Navy’s LUSVs
Lockheed Martin’s work also extends to the combat systems for the Navy’s Large LUSVs.
Just as autonomy has touched on many other sectors of defence, so too has it impacted the maritime domain, where the concept for a future manned-unmanned ‘Hybrid Fleet’ is catching on.
A large uncrewed surface vessel, Nomad, arrives at Pearl Harbor, Hawaii to participate in Rim of the Pacific (RIMPAC) 2022. Credit: DVIDS.
The leading intelligence consultancy, GlobalData, projects the value of the global USV market to reach $3.16bn in 2033, up from $894m in 2023. Demand for military USVs is driven by many of the same factors as for uncrewed underwater vehicles, with autonomous mine-countermeasure capabilities and hybrid fleet structures driving demand for USV platforms around the globe.
In late December 2023, the US Navy successfully completed a milestone “no touch” 720-hour continuous power demonstration of a diesel generator for USV operations. During the demonstration phase, no human intervention and no preventative or corrective maintenance on the equipment was allowed. (Source: naval-technology.com)
26 Feb 24. QinetiQ Releases PrimAITE Software to Support Evolution of Cyber Defence Agents. A digital training ground for “Artificial Intelligence agents” has been made available as open-source software by the Defence Science and Technology Laboratory (Dstl) and QinetiQ Training & Simulation in a bid to further fortify the UK’s Armed Forces against the threat of complex cyber-attacks. The release ‘into the wild’ of PrimAITE – a Primary-level AI Training Environment created as part of Dstl’s multi-year Autonomous Resilient Cyber Defence (ARCD) programme – will enhance inter-governmental and agency collaboration, and enable a broader community of developers to contribute to and expedite the simulation’s evolution. Already an in-demand capability across ARCD projects, the innovative tool – which was delivered through the Serapis SSE framework by a rainbow team led by QinetiQ – provides an effective means of training and evaluating AI and machine learning in a cyber-defensive role, with its customisable environment able to model platforms and system context by representing connections, IP addresses, ports, traffic loading, operating systems and services. Importantly, PrimAITE also operates at machine-speed to allow for fast training cycles.
“The decision to make PrimAITE open source will act as a force multiplier, helping to both advance other related research areas and fine tune the functionality and effectiveness of the software itself,” said James Short, a principal systems engineer at QinetiQ Training & Simulation and technical lead for the task. “The more the simulation can be honed, the better the AI agents it trains will become.
“Ultimately, this will assist in ensuring that military platforms can automatically identify and defend themselves against cyber-attacks, reducing the need for human intervention and accelerating response times.
“By limiting the risk of systems being compromised, ARCD will in turn protect those Service personnel who use them.”
Craig Murphy, Dstl’s technical lead for ARCD, said: “PrimAITE is an invaluable tool in our pursuit for autonomous cyber defence, allowing AI and machine learning experts to apply their skills and expertise to our problem domain. It’s now in use by more than 20 projects including other programmes in Dstl and with our international partners and we continue to develop it.”
Version 2.0.0 of PrimAITE is currently available on GitHub – a platform and cloud-based service for software development, with work underway to produce version 3.0.0, which will include enhanced simulation functionality and interoperability with agents.
To date, the QinetiQ Training & Simulation-designed – and Dstl/Ministry of Defence-owned –capability has been supported by specialists from Methods Analytics, Envitia and QinetiQ. (Source: ASD Network)
23 Feb 24. Cyber Update Key points.
- Newly identified remote code execution (RCE) vulnerabilities point to increased espionage threats posed by Russia-affiliated threat groups (see Sibylline Cyber Daily Analytical Update – 19 February 2024).
- The North Korean-affiliated group ‘Lazarus’ is targeting firms in the defence sector via an ongoing cyber espionage campaign (see Sibylline Cyber Daily Analytical Update – 20 February 2024 and our Technical analysis below).
- VMware announced new vulnerabilities in its deprecated Enhanced Authentication Plug-in (EAP), underscoring elevated cyber espionage risks for users (see Sibylline Cyber Daily Analytical Update – 21 February 2024).
- A new Secure Shell (SSH) worm, ‘SSH-snake’, allows threat actors to move laterally through a compromised system (see Sibylline Cyber Daily Analytical Update – 22 February 2024 and our Technical analysis below).
- An ongoing information-stealing campaign is targeting the oil and gas sector, highlighting the sector’s increased exposure to intelligence gathering operations (see Sibylline Cyber Daily Analytical Update – 23 February 2024).
Technical analysis of weekly stories
A new Secure Shell (SSH) worm, ‘SSH-Snake’, was recently discovered by researchers who noted its potential for lateral movement. SSH worms are generally designed to find Secure Shell credentials that are used to enable secure network connections; the worm leverages these credentials to propagate itself autonomously through a compromised system. SSH-Snake distinguishes itself from more traditional versions of SSH worms through greater stealth and efficacy due to new functionalities. It is able to delete unnecessary functions from its code once deployed, which helps it to evade detection. It also trawls a wider variety of sources to identify SSH private keys, bolstering its chances of success. After locating the private keys, the worm continuously attempts to establish connections with all possible destinations until they are exhausted. SSH-Snake was originally shared to allow companies to create a list of security priorities by efficiently mapping out potential attack paths in their network. However, it is now being actively exploited by threat actors as a tool that provides them with unprecedented visibility into a victim’s network.
The North Korean-affiliated group ‘Lazarus’ has conducted cyber espionage campaigns against entities in the defence sector. The campaign focuses on the theft of information related to advanced military technology as part of an effort to modernise North Korea’s own conventional and strategic weapons. Lazarus primarily employs supply chain attacks to compromise targets, leveraging vulnerabilities in third-party software to obtain access to a targeted system. In a notable incident in 2022, the actor infiltrated a victim’s system via a vulnerable webserver in their supply chain, before then stealing SSH credentials. The stolen credentials subsequently allowed the actor to breach the victim’s system, and to deploy malicious files and operate laterally through the network. Threat actors are likely to continue performing similar operations and to modernise their tactics, techniques and procedures (TTPs) in order to sustain espionage campaigns. Additionally, Lazarus has supplemented its supply chain operations with a long-term social engineering campaign, ‘Operation Dream Job’.
Some non-exhaustive recommendations to mitigate against these threats include:
- Monitor devices and networks for suspicious activity
- Add available Indicators-of-Compromise (IoCs) to the organisation’s security detection systems to detect potentially malicious samples on the network
- Ensure adequate security detection measures are in place, particularly behaviour-based end-point detection and response (EDR) solutions
- Conduct cyber hygiene awareness courses for users to enable them to recognise and report phishing and social engineering attempts
- Consider disabling password authentication for access to SSH services to reduce the opportunity for remote actors to ‘brute-force’ credentials; employ key-based authentication (which is harder to brute-force)
Word(s) of the week
Our cyber word(s) of the week: Supply chain attack Definition: A type of attack that exploits vulnerabilities and/or abuses established trusted relationships with third-party vendors to infiltrate a target’s system. (Source: Sibylline)
26 Feb 24. Australia prioritises cyber defence. Australia has bolstered efforts to enhance cyber-defence capabilities to prevent and mitigate cyber attacks against critical infrastructure. For the Australian Defence Force (ADF), cyber defence is an integral part of a wider endeavour to strengthen military preparedness for modern hybrid warfare. The extensive use of cyberwarfare in the ongoing Russia-Ukraine conflict has provided an impetus to such ADF efforts.
Australia’s Defence Strategic Review (DSR), released in April 2023, highlighted the need for the ADF to scale up cyber and information operations to counter growing “non-geographic security threats”, particularly cyber. “[The Australian Department of Defence (DoD)] must enhance its cyber domain capabilities to deliver the required responsiveness and breadth of capability to support ADF operations,” the DSR said.
The DSR added that the DoD needs to focus on integrating the defence of command, control, communications, and computers (C4) networks and architectures; delivering a coherent and, where possible, centralised cyber domain capability development and management function; and building and sustaining a trained cyber workforce. (Source: Janes)
26 Feb 24. THALES And Google Scale ESIM Across ANDROID Ecosystem.
- Thales eSIM Discovery solution will run Google Discovery Service for seamless activation of Android devices.
- With 300+ eSIM platforms deployed worldwide, Thales actively contributes to making the world not just more connected, but also cyber-secured from the edge to the core.
- The collaboration takes user convenience to the next level, as it simplifies and speeds up devices activation and users’ profile provisioning.
By 2025, there will be over 3.4bn eSIM-enabled devices (including tablets, laptops, and smartwatches), and 98% of mobile network operators aim to offer eSIM service by that time, according to a GSMA Intelligence report. This market forecast indicates that there is a lot of interest and demand in making the most of eSIM, providing the best user experience as a primary goal. To prepare for this digital era and in close partnership with Google, Thales’ eSIM Discovery solution manages eSIM activation on Android devices, essentially without the need of multiple clicks.
When eSIM devices are first turned on, they must locate the subscriber’s desired operator and download the appropriate subscription to activate cellular access. Thales eSIM Discovery service makes this remote process as quick and easy as feasible, enabling a one click activation.
Indeed, thanks to this solution when a user initially subscribes to a new mobile network, a message will appear on the user’s mobile device screen telling them that a profile is ready for download. If accepted, the subscription is instantly downloaded. Alternatively, the user can check for a new profile through the mobile device setup wizard or settings menu. For the user, it is as simple as that to get cellular connectivity.
Furthermore, because the solution is cloud-based and designed for growth, Thales can guarantee global availability and scalability to support all Android devices and carriers around the world. To put it in another way, it allows all eSIM profile activations wherever and anytime a device is turned on.
“Thales is pleased to work with Google to provide a standardized, simple, and secure way to activate eSIM subscriptions, making life easier for users and Android device makers. Thales’ eSIM Discovery service seeks to help and simplify clients’ eSIM adoption across devices and connectivity providers. Any mobile operator that currently uses our subscription management platform may already integrate to this solution and start offering a one-click eSIM activation experience to all users with an Android device” said Eva Rudin, EVP Mobile Connectivity Solutions at Thales.
21 Feb 24. First-rate UK cyber defence at the flick of a switch ~ Goldilock’s innovative DRAWBRIDGE kill switch helps pull the plug on cyber attacks.
Picture the scenario: It’s the dead of night and a remote site is under cyber-attack by an unknown assailant. The attack has the potential to spread from network to network, revealing critical information and disrupting operations – overcoming even the most advanced cybersecurity software.
In a situation like this, the best course of action may be to physically pull the plug on the network to localise damage and stop the attack from spreading. However, this requires someone on site to take action and physically disconnect hardware, which isn’t always possible.
Many organisations fear this scenario and the possibility of cyber-attacks, especially in the modern world, where systems are accessible online 24/7, regardless of whether they are needed or not. Unfortunately, this extended online availability also increases the risk of cyber-attacks as it creates more entry points for attackers to exploit.
In areas such as Defence or critical national infrastructure, the consequences of cyber-attacks can ultimately cost lives, which highlights the need for reliable, hardware-based cyber defence.
Introducing Goldilock: closing ports to thwart security breaches. With the help of DASA funding, Wolverhampton-based SME, Goldilock, has developed a hardware cyber-defence system that allows operators to physically connect or disconnect any network or device from a system – all from a remote location – and without relying on the internet or software protocols. The device is designed to operate as if there is someone present on location to unplug or connect a cable.
The solution is called DRAWBRIDGE, which looks similar to a multi-port Ethernet network switch, although it is quite different. DRAWBRIDGE’s unique feature is that each fibre optic port in the circuit board is equipped with actuators, known as electromechanical relays, which can physically connect or disconnect network ports on-demand, via secure SMS with OTP or an out of bound secure browser interface (separate from the primary network).
Goldilock’s technology has a clear advantage over traditional software-based cybersecurity measures as it is hardware-based and self-contained – which means it does not rely on any external services to operate. It is virtually invulnerable to cyber-attacks as it lacks a MAC or IP address – unlike cyber defence software.
Key benefits for defence:
- Can be implemented in a military base, or military outpost where secure communication is paramount and where immediate communication blackouts are needed to ensure operational security.
- A new approach to reducing the cyber-attack surface in order to protect lives, infrastructure and military assets from harm
- Ensures IP enabled assets can disappear and re-appear at will from network visibility, eliminating any risk of signals being detected or accidentally broadcast.
- The innovation operates on the physical/hardware layer. It is data and signal agnostic so it cannot be discovered by adversaries who gain access to a network.
Goldilock’s journey with DASA. Goldilock, having previously created a comparable solution for commercial use in large data centres, engaged with DASA to address the need for a Layer 1 (physical) cyber defence solution that can be used in any environment, including defence.
In 2021, Goldilock submitted a compact version of their cyber defence system to the DASA Open Call, showing defence stakeholders that a hardware-based solution can provide effective first line cyber protection. Following their successful bid for DASA funding, Goldilock went on to develop an improved, more robust optical device in 2023, featuring fibre optic ports rather than copper ports, which delivered even better performance.
Stephen Kines, Co-Founder, Goldilock said: “Goldilock is new unique tool reducing the cyber-attack surface for defence and critical national infrastructure protecting modern or legacy systems. Two funding rounds from the MoD enabled Goldilock to develop unique solutions for network cyber defence, allowing operators to remotely physically connect or disconnect any network or device. The Goldilock tech is particularly suited to bridging the OT/IT cyber gap and keeping systems on warm standby securely or operating as a network kill switch.
“DASA’s Innovation Outline process makes it possible for smaller and resource-strapped companies to get a fair hearing regarding their ideas, without chasing for weeks and months to see an outcome.
“Having worked on applications for other UK-based and EU grant options, you are typically required to provide a level of granularity regarding reporting that many start-ups do not have the resources to provide.
“The information required for some of these applications consumes a significant amount of time and scarce resources, all the while, uncertainty remains about the likelihood of receiving a grant.
“On the other hand, the Regional Innovation Partner approach by DASA, which is exceptionally accessible, allows any start-up to ‘Fail Fast’ if that is the inevitable outcome.”
Goldilock: The future is looking secure. Goldilock has made remarkable progress with the support of DASA, taking the project from concept to market-ready product. Goldilock’s participation in the 2023 Investment Showcase, along with other DASA-funded innovators, is a testament to this progress. During the event, Goldilock benefited from DASA’s Access to Mentoring and Finance (A2MF) team, which conducted workshops to improve presentation content and pitch decks. This allowed the SME to refine their pitch to potential investors.
Goldilock’s recent funding from DASA has generated attention from commercial organisations, various branches of the MoD, US DoD, Cabinet Office, NATO, and Ukrainian Cyber Command, where the innovative technology is being utilised. Furthermore, Goldilock was recently selected for the Energy Resilience focus area within the 2023 NATO DIANA Pilot Challenge programme, which invited innovators to suggest dual-use technology solutions that could support microgrids in challenging situations like natural disasters or conflicts. This milestone is a significant achievement for the company. (Source: www.joint-forcescom)
————————————————————————-
Spectra Group (UK) Ltd
Spectra Group (UK) Ltd, internationally renowned award-winning information security and communications specialist with a proven record of accomplishment.
Spectra is a dynamic, agile and security-accredited organisation that offers secure Hosted and Managed Solutions and Cyber Advisory Services with a track record of delivering on time, to spec and on budget.
With over 15 years of experience in delivering solutions for governments around the globe, elite militaries and private enterprises of all sizes, Spectra’s platinum and gold-level partnerships with third-party vendors ensure the supply of best value leading-edge technology.
Spectra was awarded the prestigious Queen’s Award for Enterprise (Innovation) in 2019 for SlingShot.
In November 2017, Spectra Group (UK) Ltd announced its listing as a Top 100 Government SME Supplier by the UK Crown Commercial Services.
Spectra’s CEO, Simon Davies, was awarded 2017 Businessman of the Year by Battlespace magazine.
Founded in 2002, the Company is based in Hereford, UK and holds ISO 9001:2015, ISO 27001:2013 and Cyber Essentials Plus accreditation.
————————————————————————-