Sponsored by Spectra Group
———————————————————————————————————————————————————————————————————————————————————————————————————————————
11 Sept 24. Comtech Launches New Digital Common Ground Modem Product Line for DoD and Coalition Customers. U.S. sovereign designed DCG modems enable warfighters and military assets to easily roam across commercial and purpose-built networks.
Comtech (NASDAQ: CMTL) (“the Company”), a global technology leader, today announced the launch of the Company’s new Digital Common Ground (“DCG”) portfolio of modems. Comtech’s DCG product line is designed to enable the U.S. Department of Defense (“DoD”) and coalition partners to move to digitized, hybrid satellite network architectures, which will bring forward a new era of secure, resilient, interoperable, and ubiquitous connectivity across all domains.
Built on the proven success of Comtech’s extensive satellite communications (“SATCOM”) modem portfolio, the Company’s DCG modems are designed and built at Comtech’s headquarters in Chandler, AZ and support commercial and government satellite operations on a single common platform that can be reconfigured rapidly to address changing operational needs. Comtech’s DCG portfolio is also designed to evolve over time to incorporate new capabilities and keep pace with the upgrade cycle of new innovative satellite constellations-significantly reducing overall lifecycle costs for customers while also delivering industry leading performance and efficiency.
“As a leading provider of U.S. sovereign developed and manufactured communications solutions, Comtech’s software defined DCG product line provides the building blocks needed to enable the trusted, all-digital communications systems of the future,” said John Ratigan, Interim CEO of Comtech. “DCG represents a transition away from stovepipes and siloed communication systems toward an open-standard and truly flexible architecture. Comtech’s DCG product line reduces total cost of ownership for satellite operators while also enabling an all-digital, software defined infrastructure that can rapidly adapt at the speed of relevance.”
Customer Value and Operational Benefits:
- Digital Transformation: Comtech’s DCG product line is designed to align with digital transformation and modernization initiatives to support the evolution of SATCOM infrastructures across commercial and government markets-enabling significantly enhanced flexibility, interoperability, and ease of operation while also reducing cost and removing complexity of operations.
- Security: Comtech incorporates modern cybersecurity design principles at every level across its DCG product line-ranging from a trusted supply chain to a thoughtful software upgrade lifecycle, including in-field updates. The DCG product line also offers secure over-the-air communications through multi-stream Federal Information Protection Standards 140-3 Level 2 certified Transmission Security.
- Superior Performance: Comtech’s DCG product line offers customers industry leading performance compared to other products available in the market today-offering multi-gigabit throughput at launch.
- Enhanced Situational Awareness: The data-centric infrastructure of the DCG product line enables enhanced data exchange and facilitates a shared understanding of the battlespace, crucial for informed decision-making.
- Multi-Orbit Capability & Improved Interoperability: Comtech’s DCG portfolio is one of the first product lines on the market today offering robust access to multi-orbit capabilities across commercial and purpose-built networks. The DCG product line is also one of the first to be Digital Intermediate Frequency Interoperability (“DIFI”) compliant-adhering to DoD and coalition communications standards to enable seamless information flow between services, a key tenet of Combined Joint All Domain Command and Control (“CJADC2”).
- Waveform Flexibility: The DCG product line currently supports a variety of critical waveforms including DVB-S2X, DSSS, EBEM, and other protected waveforms. With a software defined core, Comtech’s DCG product line can easily add waveforms and integrate new capabilities tailored to specific mission needs.
Availability: Comtech is currently accepting orders for its DCG product line. For more information, please visit our webpage: https://comtech.com/capability/dcgmodems/
11 Sept 24. BIS Proposes Reporting Requirements for the Development of Advanced Artificial Intelligence Models and Computing Clusters – (89 Fed. Reg. 73612) – The U.S. Department of Commerce’s Bureau of Industry and Security (BIS) has proposed a rule that would amend its Industrial Base Surveys—Data Collections regulations by establishing reporting requirements for the development of advanced artificial intelligence (AI) models and computing clusters under the Executive order of October 30, 2023, “Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence.” Section 4.2(a)(i) of Executive Order 14110 of October 30, 2023, “Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence” (E.O. 14110), directs the Secretary of Commerce to require companies developing, or demonstrating an intent to develop, potential dual-use foundation AI models to provide certain information to the Federal Government on an ongoing basis. Additionally, section 4.2(a)(ii) of E.O. 14110 directs the Secretary of Commerce to require companies, individuals, or other organizations or entities that acquire, develop, or possess a potential large-scale computing cluster to report any such acquisition, development, or possession, including the existence and location of these clusters and the amount of total computing power available in each cluster. As defined under E.O. 14110, a “dual-use foundation model” is “trained on broad data; generally uses self-supervision; contains at least tens of bns of parameters; is applicable across a wide range of contexts; and that exhibits, or could be easily modified to exhibit, high levels of performance at tasks that pose a serious risk to security, national economic security, national public health or safety, or any combination of those matters.” The reporting requirements proposed in this regulation are intended to apply to dual-use foundation models that meet technical conditions issued by the Department. The Department expects to update the technical conditions, based on technological advancements, as necessary and appropriate, as directed by section 4.2(b) of E.O. 14110. Interested persons have until October 11, 2024, to submit comments. (Source: glstrade.com)
10 Sep 24. Viasat Receives Government Certification of IFF Test Set and IFF Certification Tools.
- Viasat’s VRG-1000 and VRG certification tools can reduce IFF certification testing times from weeks to hours
Viasat, Inc. (NASDAQ: VSAT), a global leader in satellite communications, today announced that its Viasat Radio Frequency Generator (VRG)-1000 solution has been recertified by the Department of Defense AIMS program office.
Initially certified in 2017, the VRG-1000 has expanded its capabilities and is the only AIMS certified real-time, Identify Friend or Foe (IFF) RF environment generator.
The Viasat VRG-1000 is a commercial IFF testing capability that is highly specialized for testing military and commercial IFF systems. IFF systems are used in nearly all aircraft worldwide for reliable navigation and aircraft identification.
The VRG-1000 is unique in its ability to model complex flight environments at RF, making it easier for IFF manufacturers or integrators to test the effectiveness of their systems. The VRG-1000 provides certification tools for transponders, interrogators and passive receivers. Viasat’s evolved solution can significantly simplify the process for complex testing, which would previously require the use of multiple test sets to complete a single test. The Viasat solution will accelerate the supported test times from weeks to hours, including the VRG-1000 certification tool that performs complex Automatic Overload Control (AOC) transponder certification tests in less than one hour.
The VRG-1000 enables testing in a realistic, highly dense environment which other IFF test sets can’t replicate. The Viasat solution is designed to support a density of 400 targets on a single system, and over 2000 targets with multiple systems. The VRG-1000 IFF test set can also generate RF for up to 50 tightly synchronized interrogators to create complex, non-overlapping interrogations for testing transponder density and corner cases.
“With the increasing complexity of the RF signal environment, the need for more advanced, realistic testing capabilities has never been more important as older IFF testing capabilities can no longer support new AIMS certification requirements,” said David Schmolke, Vice President of Mission Connections and Cybersecurity, Viasat Government. “Viasat’s VRG-1000 IFF test set allows the user to perform comprehensive and complex flight-testing during development and our certification tools enable IFF certification testing in a fraction of the time previously required, resulting in improved product time-to-market with lower development and test costs for our customers.” (Source: ASD Network)
11 Sep 24. Global: Exploitation of vulnerable edge devices points to elevated risks stemming from botnet. On 9 September, the security company Sekoia reported that the ‘Quad7’ botnet is exploiting software vulnerabilities to target global devices in an ongoing cyber operation. The botnet comprises five device clusters and includes compromised internet-facing ports for multiple small office/home office (SOHO) devices, virtual private network (VPN) appliances and wireless routers. Threat actors are exploiting Quad7 to conduct brute force attacks, primarily against Microsoft 365 services, hijacking corporate user accounts to obtain administrative privileges on compromised systems. Notably, the threat actors also use a new backdoor to control infected services remotely while avoiding detection by internet scans. Network edge devices play a significant role in botnet infrastructure as they facilitate widespread attacks while obscuring threat actors’ operations and protracting the length of attacks. We assess that Quad7 is possibly in a testing phase due to the increasing number of infected devices; this points to elevated security risks facing global organisations in the long term. (Source: Sibylline)
11 Sep 24. Anduril & Oracle Partner to Deliver AI-Powered Defense Solutions from the Datacenter to the Tactical Edge. Anduril and Oracle are partnering to bring Anduril’s Lattice, an open and extensible software platform for command and control (C2),to Oracle Cloud Infrastructure (OCI) and OCI Roving Edge Infrastructure globally. Anduril will also pair its Menace hardware systems with OCI to enhance operations in connected and disconnected mobile command and control environments. Together, Oracle and Anduril will provide secure mission capabilities across the globe from the datacenter to the tactical edge, and at all classification levels. Anduril will deploy Lattice on Oracle Cloud Isolated and National Security Regions, which are Oracle’s air-gapped cloud infrastructure for mission-critical, classified defense, and intelligence workloads. Lattice will also be available in Oracle Cloud Regions, Oracle EU Sovereign Cloud, and Oracle Government Clouds in Australia, the United Kingdom, and the United States.
“Anduril’s partnership with Oracle will provide more global capabilities for our customers,” said Tom Keane, senior vice president, Anduril. “Oracle Cloud provides the global infrastructure, price performance, and data sovereignty that mission customers need to deploy scalable, autonomous, and force-multiplying technology to the far edge.”
Deploying Lattice across Oracle’s distributed cloud will enable warfighters real-time understanding, automated decision advantage, dynamic machine tasking, and human-on-the-loop automation. Anduril has also integrated OCI Roving Edge Infrastructure into the Menace family of expeditionary hardware C4 solutions. Running across Oracle’s distributed cloud, Menace will enable warfighters to deploy, manage, and operate mission applications in disrupted, disconnected, intermittent and low-bandwidth (DDIL) environments.
“Public sector and defense customers operate in the real world, where deployable hardware interacts with humans and creates effects in the most complex environments imaginable,” said Rand Waldron, vice president, Oracle. “Anduril’s Lattice on Oracle Cloud ties together those physical systems with the world’s best cloud services, data management, and AI infrastructure— on a hyperscale global network, across an airgap or in the field.”
Oracle is the only hyperscaler capable of delivering AI and a full suite of 150+ cloud services across dedicated, public, sovereign, and hybrid cloud environments, anywhere in the world including air-gapped infrastructure on classified networks. With OCI’s sovereign and government cloud offerings, customers can meet regulatory, security, and performance requirements while getting the full benefits of the cloud and AI. Anduril supports operations with the US Department of Defense, the US Department of Homeland Security, the Australian Defence Force, the UK Ministry of Defence, and other partners around the world. Powered by Lattice, Anduril solutions provide integrated, persistent awareness, security, and command and control at the tactical edge across land, sea, and air. (Source: ASD Network)
11 Sept 24. Strategic AI investment in APAC is booming. AI investment in APAC countries has boomed, with major tech companies making huge strategic investments. Singapore’s Minister of Defence Dr Ng (right) calling on ROK Minister of National Defense Mr Kim (left) at the REAIM 2024 Summit on 9 September. Image courtesy of Singapore’s Ministry of Defence. ©2024 Government of Singapore.
The two-day Responsible Artificial Intelligence in the Military domain (REAIM 2024) summit concluded in Seoul on 10 September 2024, drawing global attention to the growing significance of AI in military applications.
Co-hosted by South Korea, Kenya, the Netherlands, Singapore, and the UK, the event highlighted the crucial need for responsible AI deployment in defence.
With AI’s rapid evolution, the military sector stands at the forefront of technological transformation. While AI has the potential to accelerate decision-making and impact collateral damage, there are serious risks of poor judgment due to biased data or lack of oversight. This motivates much of the international dialogue convened at REAIM 2024..
In parallel, Asia-Pacific (APAC) is fast becoming a global leader in AI investments, particularly in defence and cloud technology, according to a GlobalData report. APAC’s position as a ‘powerhouse’ reflects its role in accelerating AI adoption, particularly for military use. Countries like Singapore, Indonesia, and Thailand are investing strategically to foster AI-driven economies.
Tech giants are a significant driving force behind this investment wave. Microsoft, Amazon, Google, and NVIDIA have each announced large-scale investments in APAC, aimed at expanding cloud infrastructure and AI capabilities. These moves signal a broader realignment of the global tech landscape, with military applications becoming an integral aspect.
Microsoft has committed bns to boost AI and cloud infrastructure in Southeast Asia and Japan. Its investments include a $2.2bn initiative in Malaysia, aiming to establish an AI Centre of Excellence and enhance cybersecurity. In Indonesia, $1.7bn will be allocated to data centres and AI training, which aligns with the military’s growing reliance on AI for predictive analytics.
Amazon’s AWS has similarly announced substantial investments in APAC, amounting to $12.7bn in India by 2030. It also plans to develop a new infrastructure region in Taiwan by 2025. These investments will support advancements in generative AI, which could have military applications in training and bridging skill-gaps.
Google, not to be outdone, has increased its total investment in Singapore to $6.7bn with the completion of its fourth data centre. The company’s focus on hyperscale data infrastructure aims to enhance AI service delivery, a move that could strengthen military communications and operational efficiency in the region.
NVIDIA is also playing a pivotal role, partnering with Japan’s digital infrastructure providers and receiving a $740m boost from Japan’s Ministry of Economy, Trade, and Industry. This collaboration will foster generative AI development, which could support a range of military activities from simulation to real-time battlefield analytics. NVIDIA’s further $200m investment in Indonesia to build an AI Centre reinforces the military’s interest in AI for mission-critical functions.
Tejal Hartalkar, a Senior Analyst at GlobalData, commented, “The influx of AI and cloud investments in APAC signals more than a temporary boom. It is a significant realignment that could position the region at the forefront of AI innovation.”
“Countries like Singapore, Malaysia, Indonesia, and Thailand are leveraging strategic investments to build AI-driven economies. The substantial backing from big techs aimed at accelerating cloud and AI adoption in APAC is a testament to the region’s capability to attract and execute large-scale technology projects,” continued Hartalkar.
Despite the opportunities, APAC still faces challenges. Disparities in AI readiness, inconsistent internet connectivity, and varying regulatory frameworks across the region hinder uniform growth. Nevertheless, countries are committed to overcoming these hurdles, ensuring that AI and cloud technology can serve both civilian and military purposes effectively.
10 Sept 24. Leonardo DRS Delivers Critical C5I Capabilities for New Australian Army Combat Vehicles. Leonardo DRS, Inc. (NASDAQ: DRS) announced today that it has delivered, ahead of schedule, critical C5I capabilities for the Australian Army’s Heavy Armoured Capability Systems. The delivery provides the new vehicles with the latest situational awareness technology allowing the Australian Army to keep ahead of new and emerging threats in the region.
Through the U.S. Government Foreign Military Sales program, Leonardo DRS was selected to provide its next-generation ruggedized C5I Battle Management System (BMS) hardware for the new M1A2Sepv3 Main Battle Tanks; M1A2Sepv3 and M88A2 Recovery Vehicles; M1074 Joint Assault Bridge platforms, and M1150 Assault Breacher Vehicles.
The Leonardo DRS BMS technology delivered to the Australian Army is designed for the service’s unique requirements and is built around the same combat proven C5I hardware in use with the U.S. Army, U.S. Marine Corps, and U.K.’s ground combat vehicles. It is also designed to easily integrate networked communications with United States and coalition partners.
Leonardo DRS is one of the largest world-wide suppliers of rugged platform computers and display systems and has been providing these advanced systems to the Australian Army for more than 20 years. In total, the company has delivered more than 200,000 systems internationally, built to survive harsh environments and rigorous military standards.
“We are very proud to support our close allies in the Australian Land forces by delivering our newest generation of proven C5I Battle Management System capability ahead of schedule,” said Bill Guyan, senior vice president and general manager of the Leonardo DRS Land Electronics business unit. “In today’s complex threat environment, it is paramount to ensure these critical capabilities are ready to be fielded as soon as possible,” he said.
Network computing and integration is a key strategic focus for the DRS as it continues to be the leading provider of advanced C5 technologies with the U.S. military and allied militaries around the world. The combat-proven, ruggedized systems enable increased data and communications needed for targeting, situational awareness and Battle Management Systems in multi-domain battlefield operations. The company is investing in the future of C5 through the development of the next-generation of tactical computing systems, AI processing solutions and advanced C5ISR/EW Modular Open Suite of Standards/ Sensor Open System Architecture aligned mounted systems – all aimed at enabling future network and platform processing to improve sensor fusion, situational awareness, and reduce the cognitive burden for commanders and crews. (Source: BUSINESS WIRE)
10 Sept 24. Goldilock has today been announced as one of the ten companies selected to join the second phase of the Defense Innovation Accelerator for the North Atlantic (DIANA). The ten innovators were part of 44 companies chosen in 2023 to join the first acceleration cohort of the newly formed DIANA, an organisation set up by NATO Allies to tackle the complex security challenges with disruptive dual-use technologies.
As part of Phase II, Goldilock will receive additional funding of up to €300,000 as well as tailored programming, investor networking, and adoption opportunities. The approved funding will support Goldilock in obtaining technology certifications in CNI and defence settings, developing scalable versions of its technology for wider deployments, and establishing software tools for planning, deploying and operating large multi-site deployments.
Of the 44 participants accepted into Phase I, Goldilock emerges as the only CNI-focused cyber company selected to progress to Phase II. The remaining nine innovators come from seven nations, specialising in a range of technology sectors from quantum sensing to renewable energy to ultra cold matter.
This new achievement fuels Goldilock’s momentum as its unique solution, FireBreak, continues to gain recognition within the defence sector and the cybersecurity industry, empowering organisations to detect and neutralise sophisticated cyber attacks before they inflict lasting damage. With active participation in various incubation and acceleration programmes, including the UK’s National Cyber Security Centre’s joint NCSC For Startups programme with Plexal, and the UK Ministry of Defence’s Defence and Security Accelerator, this latest advancement has further solidified the government-trusted and CNI-backed company’s position as a leading innovator in advanced threat protection.
“Cyber attacks are growing more sophisticated year after year, and as demonstrated by recent incidents, not even the largest, most cyber-aware organisations are 100% protected. It’s clear something’s not working, and now more than ever, companies need to adapt their cybersecurity strategy,” said Tony Hasek, CEO and Co-Founder of Goldilock. “To keep these threats at bay, our stand-out hardware-based approach moves away from traditional methods and empowers users to physically disconnect their online systems in an instant. Without an internet connection, cyber attackers lose all their power, stopping them in their tracks and allowing organisation owners and managers to regain complete control.”
To move into Phase II, innovators had to demonstrate progress in their commercial and defence market potential, the technical viability and novelty of their solutions, and their investment readiness. Review panels compromised technical defence and innovation experts.
“We’re proud to announce the ten innovative companies moving into Phase II,” said Professor Deeph Chana, Managing Director of DIANA. “To solve complex security resilience problems, we need an ecosystem of creative, collaborative innovators willing to bring their talent and expertise to bear. These ten innovators, and indeed all of our first cohort, are paving the way for a strong pipeline of innovation for Allied nations to adopt.”
Phase I of the acceleration programme is a six-month ‘boot camp’ that increases participants’ exposure to defence markets and needs, commercial and investment guidance, and demo and testing opportunities. Innovators receive €100,000 as a main grant and are paired with one of DIANA’s network of accelerators across the Alliance. As such, NATO plans to design a bespoke program for Goldilock to scale, providing further validation in a wider set of the 32 countries and in dual-use scenarios.
Continuing this successful relationship, Goldilock is currently exploring collaboration opportunities with NATO Cyber Security Centre as well as cooperation with several of the NATO DIANA industries.
About Goldilock:
Goldilock FireBreak is a physical cybersecurity solution that saves manpower, time, money, and nerves. Based on Goldilock’s patented DPNS, it allows users to issue an authenticated remote non-IP command to instantly and physically isolate and ring-fence systems within seconds, from, and to, anywhere on Earth – without using the internet. The asset is then completely safe and un-hackable because it is truly physically disconnected from the network – exactly as a firebreak creates a physical gap over which fire cannot spread.
The “Non-IP”, or non-internet-protocol enabled command, is significant, because the method of control is completely taken away from the potential attack vector – the internet itself. Furthermore, the Goldilock FireBreak is triggered port by port, so disconnection and isolation can be very granular – right down to the network segment or endpoint.
About DIANA:
DIANA is the Defence Innovation Accelerator for the North Atlantic, a NATO organisation with a mission to locate and accelerate dual-use innovation across the Alliance. DIANA provides technology developers with the resources, networks and expertise to address critical defence and security challenges, to create a more peaceful and resilient future. Learn more at www.diana.nato.int.
11 Sept 24. Quantum Bridge Accepted into Canadian Federal Procurement Program. Quantum Bridge, a company offering a range of advanced quantum-safe data-security solutions, today announces that it has been accepted into a fast-track government procurement program. This follows extensive testing by the Canadian Government of the company’s Symmetric-Key Distribution System (SDS). This first of its kind solution now incorporates both Distributed Symmetric Key Establishment (DSKE) technology and multiple Post-Quantum Cryptography (PQC) algorithms including the Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM). The latter being recently established by the U.S. National Institute of Standards and Technology as one of three new standards for quantum-safe encryption.
By combining DSKE and Post-Quantum Cryptography such as ML-KEM in a single encryption solution, Quantum Bridge has developed a truly unbreakable method for protecting data and communications from ‘harvest-now and decrypt later’ attacks. Many recognized cryptographic authorities have recommended the use of symmetric keys in combination with PQC to protect sensitive information. The Quantum Bridge solution now allows the integration of this combination of technologies into existing communications infrastructure.
As the maturity of quantum computing continues to accelerate in the coming years, this type of encryption will become necessary not only to protect classified information, but also sensitive personal data such as financial information and medical records. For this reason, stakeholders ranging from governments to banks, telecom companies and hospitals are interested in this technology.
“Acceptance into Innovative Solutions Canada’s Pathway to Commercialization program is an important milestone for Quantum Bridge and provides us the opportunity to sell our innovations directly to the Government of Canada,” said Mattia Montagna, CEO at Quantum Bridge. “It also confirms that this solution is ready for use today. It is available now for forward-thinking government and corporate interests which are actively looking to absolutely ensure that their sensitive information and customer data are completely safe.”
Innovative Solutions Canada’s ‘Pathway to Commercialization’ is a program which provides small and medium-sized businesses the opportunity to explore commercial sales with the Government of Canada. To qualify, companies must successfully complete a period of testing with a department of the government of Canada. Upon completion of testing, it must be determined that the technology is at Technology Readiness Level 9. Quantum Bridge has successfully completed this testing with Defence Research and Development Canada, and has now been accepted into this phase of this Innovative Solutions Canada program.
DSKE encryption is proprietary to Quantum Bridge. This technology is highly scalable in a network setting, has no distance limit, and provides information-theoretic security via novel protocols for data sharing. This has been demonstrated in both network security and mobile applications. Further information on these or other data security innovations from Quantum Bridge is available on the company’s website at quantumbridge.io.
09 Sep 24. Taiwan: Cyber operation targeting military-related sectors points to raised espionage risks for firms. On 6 September, the cyber security company Trend Micro reported on an ongoing cyber espionage operation that has been targeting drone manufacturers and other military-related industries in Taiwan since March. The group behind the campaign (‘TIDRONE’) is a previously undocumented threat actor with suspected ties to other Chinese-speaking groups. The exact method with which it obtains initial access to targets is unclear. However, victims appear to have used the same enterprise resource planning software, underscoring that this is possibly a supply chain-focused operation. Notably, TIDRONE has consistently updated its arsenal during the operation, employing various anti-analysis and defence evasion techniques such as disabling security products. We therefore assess that the group is moderately sophisticated. While the most recent campaign has specifically targeted Taiwan, telemetry from the cyber security company VirusTotal indicates that TIDRONE has targeted other countries (such as Canada and South Korea) in previous years, elevating the cyber espionage risks facing military-related sectors globally in the long term. (Source: Sibylline)
09 Sept 24. As part of the collaborative framework and the positive relationship between Italy and Saudi Arabia, ELT Group signed a Memorandum Of Understanding (MoU) with the Ministry of Investment of the Kingdom of Saudi Arabia (MISA) and the General Authority for Military Industries (GAMI) in the Kingdom of Saudi Arabia (KSA).
Signed in the presence of the President and CEO Enzo Benigni, HE Eng. Khalid bin Abdulaziz Al-Falih Saudi Minister of Investment, Mohammed bin Saleh Al-Athel, Deputy Governor of the Saudi General Authority for Military Industries, Lorenzo Benigni the Senior VP Institutional Relations and Paolo Izzo our Senior VP Global Sales, the Mou addresses the achievements of ELT Group to align its presence in the Kingdom with KSA’s Vision 2030, aiming at exploring collaboration opportunities in the aerospace and defence sectors, including training and development of a domestic supply chain in Saudi Arabia.
ELT Group has a long established history and strong relationship with the Country, marked recently by the establishment of a Saudi-law company, Elettronica for Industries LLC, focused on localizing logistic support and, more extensively, the entire value chain.
Through this MOU ELT Group wants to underline its role as a key Partner to the Kingdom of Saudi Arabia, due to its 70 years of experience in managing the electromagnetic spectrum and developing electronic defence systems in the naval, air, land, cyber, and space domains.
06 Sept 24. AI Security Center Keeps DOD at Cusp of Rapidly Emerging Technology. The director of the National Security Agency said the agency’s new Artificial Intelligence Security Center is paying dividends in the Defense Department’s efforts to stay at the cutting edge of the rapidly advancing technology.
Air Force Gen. Timothy D. Haugh, who also serves as the commander of U.S. Cyber Command, said the security center has become vital as the agency continues to seek ways to leverage, adapt to and protect against AI technology.
“One area that we see as really being able to provide value is focusing on the security of that technology — thinking about it through both the lens of the protection of intellectual property but also how we think about defending those models to ensure that they’re being used properly,” Haugh said during an event yesterday at the Billington Cybersecurity Summit in Washington.
Haugh’s predecessor, Army Gen. Paul M. Nakasone announced the creation of the center last year, consolidating the agency’s various artificial intelligence, security-related activities.
It serves as NSA’s focal point for developing best practices, evaluation methodology and risk frameworks with the aim of promoting the secure adoption of new AI capabilities across the national security enterprise and the defense industrial base.
Haugh said NSA also plays a critical role in shaping the government’s efforts to better understand the risk of AI in the hands of adversaries and defending against those risks.
U.S. officials have emphasized the increasing role AI is having in shaping the national security landscape, and they’ve taken steps to shape the future of the emerging technology.
Last year, DOD released its strategy to accelerate the adoption of advanced AI capabilities to ensure U.S. warfighters maintain decision superiority on the battlefield for years to come.
The Pentagon’s 2023 Data, Analytics and Artificial Intelligence Adoption Strategy builds upon years of DOD leadership in the development of AI and further solidifies the United States’ competitive advantage in fielding the emerging technology, defense officials said in releasing the blueprint.
In unveiling the strategy, Deputy Defense Secretary Kathleen Hicks also emphasized the Pentagon’s commitment to safety and responsibility while forging the AI frontier. The U.S. has also introduced a political declaration on the responsible military use of artificial intelligence, which further seeks to codify norms for the responsible use of the technology.
Haugh said the agency also remains at the forefront in shaping DOD’s use of the technology, with a keen focus on responsibility.
He added that NSA brings a unique perspective from within the U.S. government to responsibly shape the future of AI. (Source: U.S. DoD)
06 Sept 24. Cyber Update Key points.
- The North Korean-nexus group ‘Citrine Sleet’ is exploiting a zero-day vulnerability to target financial and cryptocurrency organisations, raising financial risks (see Sibylline Cyber Daily Analytical Update – 2 September 2024 and our Technical analysis below).
- A new ransomware operation is targeting VMware ESXi servers, elevating financial and disruption risks for global organisations (see Sibylline Cyber Daily Analytical Update – 3 September 2024 and our Technical analysis below).
- A new highly sophisticated backdoor points to elevated security risks from the Chinese-nexus group ‘Earth Lusca’ (see Sibylline Cyber Daily Analytical Update – 4 September 2024).
- The seizure of several websites used in a Russian-linked influence operation highlights increased disinformation risks to US voters (see Sibylline Cyber Daily Analytical Update – 5 September 2024).
- A long-term campaign by Chinese-speaking cyber actors, ‘Tropic Trooper’ will raise security risks to Middle Eastern government entities associated with human rights investigations (see Sibylline Cyber Daily Analytical Update – 6 September 2024).
Technical analysis of weekly stories
The North Korean-nexus group ‘Citrine Sleet’ exploited a zero-day vulnerability (CVE-2024-7971) to target financial and cryptocurrency organisations. Citrine Sleet likely used social engineering tactics to direct users to a malicious actor-controlled domain, enabling them to exploit CVE-2024-7971 and remotely execute code on compromised systems. The actors then deployed a Windows sandbox escape payload to evade detection from the system’s security mechanisms. Simultaneously, the group also loaded the FudModule rootkit, directly storing it in the system’s memory to facilitate obfuscation. The FudModule establishes administrator-to-kernel access, allowing for direct kernel object manipulation (DKOM) which facilitates the disruption of the compromised system’s core configurations. Additionally, the rootkit provides the group with prolonged access and control over compromised Windows operating systems, highlighting the high sophistication of the group’s tactics. Notably, the most recent version of FudModule extends kernel tampering privileges to standard users as well as admins, underscoring the likely continuous development of this malware.
A new ransomware-as-a-service (RaaS) operation, ‘Cicada3301’, has targeted global VMware ESXi servers since June. Cicada3301 first infiltrated targeted systems using stolen credentials to gain unauthorised access to its target’s ScreenConnect account, highlighting the persistent security risks stemming from the software supply chain. There is a possibility that Cicada3301’s infrastructure may be affiliated with the known ‘Brutus’ botnet, which likely forms part of a wider intrusion campaign. Upon obtaining initial access, the actors then deploy ransomware, encrypting a system’s files and downloading a ransom note. The group also exfiltrates sensitive data from compromised ESXi hosts prior to encryption to conduct double extortion attacks. Furthermore, the ransomware contains several layers of encryption and a sleep parameter to delay the execution of the encryptor, highlighting the actors’ sophistication and their ability to evade detection. Cicada3301 also deletes a host’s data snapshots before deploying the encryptor to hinder post-execution data recovery, further pointing to the actors’ experience and knowledge. Notably, the malware’s code and execution mechanisms resemble those of the defunct ransomware group ‘ALPHV’ which reportedly halted operations in March. These similarities, combined with the actors’ clear knowledge, sophistication and their potential connection to the Brutus botnet, indicate a possible overlap between the groups.
Some non-exhaustive recommendations to mitigate against these threats include:
- Monitor devices and networks for suspicious activity.
- Add available Indicators-of-Compromise (IoCs) to your organisation’s security detection systems to detect potentially malicious samples on the network.
- Routinely check for newly created user accounts and other abnormal files and audit existing user accounts, often rotating credentials.
- Adopt behaviour-based end-point detection and response (EDR) solutions, prioritising the detection of the initial stages of a compromise.
- Ensure adequate security monitoring and detection capabilities, particularly for all external-facing services, devices and ports.
- Conduct cyber hygiene awareness courses for users, enabling them to recognise and report phishing and other types of social engineering.
Our cyber word(s) of the week: Kernel (Source: Sibylline)
———————————————————————————————————————————————————————————————————————————————————————————————————————————–
Spectra Group (UK) Ltd
Spectra Group (UK) Ltd, internationally renowned award-winning information security and communications specialist with a proven record of accomplishment.
Spectra is a dynamic, agile and security-accredited organisation that offers secure Hosted and Managed Solutions and Cyber Advisory Services with a track record of delivering on time, to spec and on budget.
With over 15 years of experience in delivering solutions for governments around the globe, elite militaries and private enterprises of all sizes, Spectra’s platinum and gold-level partnerships with third-party vendors ensure the supply of best value leading-edge technology.
Spectra was awarded the prestigious Queen’s Award for Enterprise (Innovation) in 2019 for SlingShot.
In November 2017, Spectra Group (UK) Ltd announced its listing as a Top 100 Government SME Supplier by the UK Crown Commercial Services.
Spectra’s CEO, Simon Davies, was awarded 2017 Businessman of the Year by Battlespace magazine.
Founded in 2002, the Company is based in Hereford, UK and holds ISO 9001:2015, ISO 27001:2013 and Cyber Essentials Plus accreditation.
——————————————————————————————————————————————————————————————————————————————————————————————————————————–