Sponsored By Curtiss Wright
https://www.curtisswright.com/
——————————————————————————————————————————————————————————————————————————————————————————————————————————————
19 Jun 25. Global: Deepfake-enhanced cyber campaign will increase security risks from North Korean actors. On 18 June, the security company Huntress reported that the North Korean state-sponsored group ‘BlueNoroff’ is using artificial intelligence (AI)-generated deepfakes to conduct a cryptocurrency-theft campaign against macOS systems. In one incident, the group contacted an employee at an unnamed company to trick them into joining an online meeting. During the meeting, the actors used deepfakes to impersonate members of the company’s leadership as well as external participants, highlighting the continued incorporation of deepfakes into cyber operations to enhance credibility. The group subsequently tricked the employee into downloading a malicious file containing a backdoor and a cryptocurrency-focused information-stealer to extract user credentials for financial profit. This incident marks the first adoption of deepfakes to impersonate company executives by North Korean state-sponsored groups. This underscores increased security and financial risks to global businesses as Pyongyang continues to leverage social engineering and AI tools to bolster its weapons and missile programme. (Source: Sibylline)
18 Jun 25. Accelerating Cyber Resilience: Air Force, DARPA Join Forces to Strengthen Cyber Defenses. The United States Air Force will incorporate formal methods-based tools on the MQ-9 Reaper via DARPA’s Resilient Software Systems Capstone program A strong, lethal military demands cutting-edge and resilient software to power every weapon and support system our U.S. warfighters depend on. However, the Department of Defense’s (DOD) reliance on aging IT infrastructure, using security policies developed over the last 30 years, creates inherent vulnerabilities in its systems, from legacy architectures to advanced weapons. Meanwhile, threat actors are actively exploiting these vulnerabilities, targeting critical infrastructure, stealing sensitive military code, and reengineering sensitive systems to compromise national security. In response, DARPA has been developing powerful tools leveraging formal methods—a mathematically rigorous approach to software development that helps eliminate exploitable vulnerabilities before software is deployed. Working closely with DARPA, the U.S. Air Force will incorporate this rigorous approach into its MQ-9 Reaper program. Rather than testing software for vulnerabilities after it’s built, formal methods use mathematical proofs to verify software behavior as it’s developed. This approach ensures software performs exactly as intended, making it inherently more secure. Many of DARPA’s formal methods tools have already transitioned to military services for further development and operational deployment. Strong overall cyber resilience requires urgent, broader adoption.
Resilient Software Systems Capstone program
The agency is partnering with each of the services via its Resilient Software Systems Capstone program to address this pressing need. The Capstone program comprises jointly funded projects on operational platforms aimed at assessing critical findings, including level of resiliency, cost, time, and level of expertise required to adopt various formal methods capabilities.
Each project will run for approximately 24 months. Objectives include:
- Achieving inherently more secure software;
- Accelerating the Authority to Operate (ATO) process;
- Streamlining software developmental testing; and
- Developing a “Best Practices Guide” to support broad adoption.
“The current patch-and-pray approach to software development for DOD systems is simply unacceptable when lives depend on those systems,” said Stephen Kuhn, DARPA Capstone program manager. “DARPA’s transition approach through the Capstone brings resilient software tools to both the services and industry partners and will allow us to capture the lessons learned to drive broad adoption of correct by construction. This effort will serve as a template that can be used by others to help jumpstart their efforts to incorporate DARPA’s resilient software tools into their platforms and development pipelines.”
The U.S. Air Force is the first organization to identify their pilot weapon system – the MQ-9 Reaper program, developed by General Atomics-Aeronautical Systems Incorporated (GA-ASI).
Traditionally, when developing resilient cyber-physical systems, original equipment manufacturers (OEMs), such as GA-ASI, and Program Offices design to standardized industry controls. They use static code analysis tools to identify manual coding errors that may lead to issues in software stability and/or potential cyber vulnerabilities.
The challenge is that the span and complexity of software changes on legacy weapon systems often result in vast amounts of developmental and cyber testing, which can last 12-18 months in a typical software upgrade program.
Formal methods have shown promise in combating these lengthy test and evaluation cycles. DARPA’s suite of software assurance/cyber resiliency tools have demonstrated the ability to conduct more verification activities upstream into the development environment, as opposed to the typical test stages when the software is already finalized. Designed for use on existing legacy source code, these tools can generate validated models of software behaviors directly from that code, dynamically assess those behaviors for resiliency/stability/safety, and can even generate specific artifacts used for certification purposes such as ATOs and airworthiness.
Simply put, Program Offices and OEMs now have software acceleration tools to use on existing code, that complement policy improvements such as the Software Acquisition Pathway.
Air Force selects MQ-9 as capstone
The Air Force team working with DARPA on the Capstone chose the MQ-9 due to the lower technical barriers-to-entry of the weapon system itself, as well as the lower cultural barriers-to-entry within the organizational enterprise.
“The MQ-9 Capstone program will improve DARPA program support by providing a step-increase in our ability to accelerate robust and resilient weapon system software to the field,” said Oren Edwards, Chief Engineer of the Air Force Life Cycle Management Center’s Medium Altitude UAS Division.
“One of the cultural barriers-to-entry of digital transformation is the misperception that massive investments in time and money are required to show any transition wins on a program, a misperception we commonly associate with the ‘valley of death’” he said. “Investments are, in fact, required, but there’s an entire cottage industry of government and commercial tools that continuously show that misperception to be false, and that’s what we’re doing here. Using DARPA’s assurance acceleration tools to move certain verification activities upstream in the software development cycle will improve agility not only for the MQ-9 but will also present significant leverage opportunities for follow-on programs across the USAF and DOD.”
DARPA is also working with the Departments of the Navy and Army, and the National Aeronautics and Space Administration (NASA) on additional Capstone program platform experiments. (Source: ASD Network)
18 Jun 25. Thales unveils mini electronic warfare payload for drones.
- Thales has launched a lightweight, remotely controlled electronic warfare payload for deployment by small drones to detect and locate radio signals.
- Easy to use by military operators with no specialised training, the mini payload heralds a new generation of interoperable, quick-to-deploy sensors that will complement dedicated electronic warfare assets in the theatre of operations.
- The new system represents a breakthrough in terms of access to electromagnetic intelligence, offering front-line units an unprecedented operational intelligence capability for that is readily accessible, agile and discreet and can be adapted for use by land or naval forces. At the Paris Air Show (16-22 June 2025), Thales is presenting a new electronic warfare solution to meet the need for more closely integrated electromagnetic dominance operations across all military units.
Traditionally only conducted by highly specialised units, electromagnetic dominance operations are now needed by all tactical formations as a pre-requisite for battlefield superiority.
With the growing intensity of electronic warfare operations, this new Thales solution is designed to provide all deployed forces, including non-specialised units, with an initial, autonomous detection, location and analysis capability.The development of this innovative solution follows a proof-of-concept (PoC) awarded to Thales by France’s Defence Innovation Agency (AID) after a European competitive procurement process. During the PoC phase, multiple users successfully tested the solution in a range of different use cases.
“The current geopolitical context and the emergence of new threats have underscored the expanding role of electronic warfare in the theatre of operations and demonstrated a growing need for all combat units to have direct access to these crucial capabilities. Today we are able to offer a unique new solution that is discreet and easy to use by non-specialised units to enable deployed forces to gain and maintain information superiority in the field. The new solution demonstrates Thales’s capacity for innovation and the ability of our development teams to respond extremely quickly to new operational requirements,” said Christophe Groshenry, Vice President, Radio Communications Products, Thales.
Weighing less than 5 kg and with a power requirement of under 40 W, the new payload is optimised for deployment by light drones. It can be installed on free-flying or autonomous drones, or on tethered drones powered and connected to the ground by a cable, to detect radio sources tens of kilometres away with no active emissions, which is a major advantage in contested environments.
17 Jun 25. Singapore’s Defence Science and Technology Agency (DSTA) and Italy’s ELT Group have signed a Memorandum of Understanding (MOU) to advance collaboration in the co-development of defence technologies for the Singapore Armed Forces (SAF). The agreement was signed on the sidelines of Paris Airshow 2025 and reinforces the successful cooperation between DSTA and ELT Group. The partnership will focus on innovation in sensors and digital technologies, and application of artificial intelligence and machine learning to advance Electro-Magnetic Spectrum Operation (EMSO) capabilities. This will support Singapore’s defence capability development in EMSO.
DSTA’s Chief Executive, Mr Ng Chad-Son said, “In today’s multi-domain operational landscape, the ability to sense, sense-make and act is decisive. We look forward to working with ELT Group to develop innovative solutions in the EMSO domain to give the SAF the edge to operate faster, smarter and more securely in challenging environments.”
ELT Group’s CEO & COO, Ms Domitilla Benigni said “We are very proud of the signing of this agreement, which confirms, once again, that our expertise in electromagnetic spectrum management is recognised and appreciated. Our relationship with Singapore is getting stronger and stronger, and we now look forward to work with DSTA and strengthening our collaboration in new domains such as EMSO on unmanned platforms”.
17 Jun 25. The R&S FSWP phase noise analyzer and VCO tester from Rohde & Schwarz, the industry standard for phase noise testing, has just received a major performance update. It is the optimal test solution for radar applications and when developing and manufacturing synthesizers, OCXOs, DROs and VCOs. With the new option R&S FSWP-B56G, Rohde & Schwarz has extended the frequency range for absolute phase noise measurements from 50 GHz up to 56 GHz. Done simply by pushing a button, no external converter is needed. These frequencies are needed for satellite communication and for jitter measurements in high-speed digital applications such as ultra-fast LAN IEEE 802.3dj or CEI-224G (Common Electrical I/O).
Speeding up measurements with external high-end signal sources
In addition, the updated R&S FSWP now supports external signal sources as local oscillators for absolute phase noise measurements up to 56 GHz. Using a high-end signal source enables users to get their results much faster, because only a few cross correlations are needed to measure the phase noise of the DUT, such as another high-end oscillator. Depending on the quality of the source, users can measure up to 1000 times faster compared to the internal source. The R&S FSWP provides tuning outputs to lock the signal source frequencies used as local oscillators to the DUT frequency. In this mode, users can measure with one or two external oscillators to get the full advantage using cross-correlation techniques. Alternatively, they can use this mode to measure two identical sources against each other (2 DUT method) and correct the results by 3 dB.
Additive and residual phase noise measurements up to 56 GHz
Equipped with R&S FSWP-B56G option, the instrument is also useful for additive and residual phase noise measurements up to 56 GHz with a frequency offset of 40 MHz on amplifiers or other components. The frequency range of the internal source for this application is now extended to 50 GHz, or up to 54 GHz with the R&S FSWP-B56G option. With external sources users can measure up to 56 GHz.
In addition, the R&S FSWP features a new marker function “NOISE FIGURE MARKER”. Users can measure the noise figure of an amplifier easily, just connecting it between the output of the signal source and input of the R&S FSWP. This easy new method for measuring the small signal noise figure of amplifiers is based just on the phase demodulation same as the phase noise measurement. As the R&S FSWP is equipped with a signal and spectrum analyzer, it delivers both the Y-factor measurement based on noise sources with a calibrated ENR in the spectrum analyzer as well as the new noise figure measurement based on demodulation in the phase noise tester.
The updated R&S FSWP phase noise analyzer and VCO tester is available from Rohde & Schwarz as off July 2025. It will be showcased for the first time to the public at IMS2025 Exhibition from June 17 to 19, 2025, at the Moscone Center in San Francisco, CA, at the Rohde & Schwarz booth 1443. For further product information, go to: https://www.rohde-schwarz.com/product/fswp
16 Jun 25. Telespazio UK Announces Successful Completion of Critical Phase in ALIGN Programme. ALIGN is the UK’s first Autonomous Laser Inter-Satellite Communications Programme. Telespazio UK, a subsidiary of Telespazio (a 67/33% joint venture between Leonardo and Thales), is proud to announce the successful completion of Phase 3 of the Autonomous Laser Intersatellite Gigabit Network (ALIGN) programme – an important milestone in developing the UK’s first commercially available autonomous, laser-based, inter-satellite communications system for CubeSats. The ALIGN project, funded through the UK Space Agency’s National Space Innovation Programme (NSIP), aims to revolutionise satellite communications by enabling secure, high-capacity data transfer using laser-based inter-satellite links (ISL). Laser communication can transmit up to 1,000 times more data per second than conventional radio systems, with enhanced security and reliability.
Led by Northumbria University, the ALIGN consortium includes Telespazio, Durham University and SMS Electronics, and receives support from Lockheed Martin. Since the start of Phase 3 in January 2023, the project has successfully navigated significant technical and programmatic challenges to achieve key objectives by the 31 March 2025 project close deadline:
- Development of the LDB CODEC board: Telespazio UK successfully designed and delivered the Laser Data Buffer (LDB), a bespoke board with integrated software and firmware that serves as the central control system for the optical inter-satellite link (ISL) payload. It manages all core payload functions and codes, and decodes high-speed laser data.
- Design and Demonstration of Optical ISL Payload: Two engineering models of the optical payload, named “FOCUS” (Freespace Optical Communication Unit for Space), were built, integrated and tested. These included the LDB board and successfully demonstrated high-speed laser communication between units.
- CubeSat Platform Integration: The ALIGN team completed integration and interface testing of the CubeSat platform, validating power and data communication links between the platform and the FOCUS payload.
Looking ahead, the ALIGN team is exploring opportunities for a potential Phase 4. Telespazio UK’s LDB product is poised to play a vital role not only in the ALIGN programme, but also in future missions involving optical communications and satellite networking. A first in-orbit demonstration of the technology is on the horizon.
Trevor Beard, Telespazio UK’s VP – Research and Development, said: “We were delighted to integrate and demonstrate our LDBs into the FOCUS engineering models and see high-speed data going end-to-end on the free-space laser links. It is exciting to work with the novel laser, sensor and optical assemblies from our ALIGN partners, and to see just what impressive performance can be achieved in these miniaturised Inter Satellite Link terminals. We are looking forward to preparing the space-ready assemblies.” (Source: ASD Network)
16 Jun 25. Europeans rush drone-based radar jammers in effort to supplant US tech. European NATO countries are eyeing drones for airborne electromagnetic-warfare operations including radar jamming, a skill many of the continent’s air forces are currently lacking. Italy’s Leonardo says between ten and twenty NATO countries have expressed interest in a capability similar to the StormShroud radar-jammer drone it provided to the U.K. Leonardo has taken a lead in radar-jamming drones with StormShroud, built around the company’s BriteStorm jammer on an unmanned aerial system from Portugal’s Tekever. U.S., European and Israeli rivals will be presenting some of their airborne electronic warfare offerings at the Paris Air Show starting here on Monday. Europe largely depends on the U.S. for airborne electromagnetic warfare, a gap some countries are looking to address amid uncertainty about American commitment to the continent. Meanwhile, an aggressive Russia has been expanding capabilities based on its experience in Ukraine, where drones are omni-present, including in the electronic-warfare role. Ukraine “has become a drone war with drone and counter-drones, and electronic jamming is part of that,” said Dick Zandee, senior research fellow at Dutch think tank Clingendael Institute and former head of planning at the European Defence Agency. “You see a ‘dronization’ taking place in a lot of areas now, including in electronic warfare.”
European NATO countries face a “critical” capability gap in airborne electromagnetic warfare, a potential risk in case of Russian aggression, analyst Justin Bronk at the U.K.’s Royal United Services Institute said in a report in March. Bronk called for European countries to lift funding to develop stand-in airborne electromagnetic attack capabilities, based on “relatively cheap” uncrewed autonomous systems that can loiter over hostile territory and would be a quick way to expand their capabilities. Leonardo has received “significant interest” in BriteStorm from NATO countries as well as defense primes, according to Michael Lea, the company’s vice president of sales for electronic warfare. Lea added he doesn’t expect any public announcement before the fourth quarter of 2025. There is “clearly the desire from some European nations to not be as dependent on the U.S. as they have been previously,” Lea said. The executive declined to name possible drone partners, but noted Leonardo has ties with drone makers including General Atomics, the maker of the MQ-9 Reaper, and Turkish Aerospace Industries. While Leonardo won’t showcase StormShroud in Paris, it will be holding a signing ceremony for a joint venture with Turkish drone maker Baykar Technologies on Monday. Stand-in radar jamming is typically in close proximity to hostile air-defense systems, as opposed to long-range stand-off jamming outside of weapons-engagement zone. Escort jamming is typically used to protect the own forces from enemy air defenses. Countries in Eastern Europe including Poland face threats with a “very extended range, so you are into stand-in jamming the moment you get airborne,” Lea said. “They can’t do stand-off jamming because they’re inside the threat envelope of adversary systems.” Drone-based stand-in jammers are cheaper, attritable, and potentially more effective by operating closer to the threat, which means that in the European theater of operations they may be a better solution than stand-off jamming, according to Lea. Still, the two approaches are complimentary and will continue to exist together, the executive said. One thing Ukraine has shown is that uncrewed capabilities planned to accompany sixth-generation fighter aircraft need to become available “far earlier,” with systems such as StormShroud allowing fourth and fifth-generation fighters to be more effective and operate more freely.
“If you can have a larger number of electronic-warfare, decoy and deception platforms, that has a value in itself, and that has absolutely been demonstrated in Ukraine,” Lea said. “I can absolutely see how you can solve a mass challenge with uncrewed platforms that allows the four-generation platform to operate as it was intended at the start of its design case.”
The trend is to move the anti-radar mission to drones because the size and recognizability of aircraft makes them easier to detect and therefore take down, as well as “terribly expensive,” Zandee said. “So, you do that kind of thing with drones.” Leonardo has an advantage in being able to declare an operational capability in radar-jamming drones with the Royal Air Force, though Lea expects announcements from competitors within the next 12 months.
“As a result of the very urgent requirement to operate in a contested electronic warfare environment, a lot of companies are trying to tackle this challenge,” Lea said. “We would be complacent to think that other competitors aren’t developing their products in the market.”
Raytheon makes the MALD-J, a jamming variant of its expendable decoy missile which the company says is the first-ever stand-in jammer to enter production. Leonardo meanwhile is working with pan-European missile maker MBDA to develop the Spear-EW stand-in jammer missile for the U.K.
At the Paris Air Show, Raytheon will present its Next Generation Jammer, a long-range jammer for the U.S. Navy’s E/A-18 Growler electronic-warfare aircraft. The Navy declared initial operational capability for the mid-range band version of the system in December. Modern Western radar-jamming systems including BriteStorm and MALD use Digital Radio Frequency Memory, which allows a jammer to record incoming radar signal and retransmit them with modifications, creating false targets and signals or just overwhelming the enemy system with noise. The work on StormShroud is based on the BriteCloud digital decoy ordered by the U.S. for the F-35, also used by the U.K. on the Eurofighter and available as an option on the Saab Gripen. Due to the situation in Ukraine, the Middle East and farther East, “our potential adversaries are learning very quickly,” Lea said. “StormShroud’s development is the U.K.’s clear aspiration to demonstrate it has a capability that can seek to challenge those threats.” Germany’s Hensoldt has been developing the Kalaetron Attack radar jammer for airborne electronic attack, focused on stand-off jamming or as an escort jammer onboard the Eurofighter, and also available in a stand-in jamming configuration. The company, which will be present in Paris, flight tested the DRFM-based system in 2023. A consortium led by Indra Sistemas that also includes Hensoldt, Elettronica and Saab has been working on a project called Responsive Electronic Attack for Cooperative Tasks, or REACT, aimed at developing a multi-jamming capability that can be integrated inside unmanned aerial combat vehicles for stand-in jamming or in pods for escort jamming. The project’s second phase will last through 2028 and received €40 m in European Union funding in 2023, on a total budget of €69.7 m, following a first three-year phase of feasibility studies and design. REACT is part of the Airborne Electronic Attack project established in 2019 within the EU’s Permanent Structured Cooperation framework. The Danish armed forces in May tested drone-based electronic warfare with a UAS from Ukraine’s Skyeton equipped with a radio-frequency payload from Denmark’s Quadsat, which the Danes said can locate and attack an adversary from hundreds of kilometers away. Skyeton and Quadsat followed up with an agreement later that month to jointly offer drone-based electromagnetic-spectrum surveillance. Electronic warfare until recent years has mostly been platform centric, so focused around the aircraft performing that mission, from specialists such as the U.S. Navy’s Growler to electronic-warfare suites such as Thales’s Spectra on the French Rafale. Thales will unveil a miniaturized electronic-warfare payload for small drones on Monday, designed to detect and locate radio communications and which the company says will be a breakthrough in electromagnetic intelligence and provide forces in combat with “unprecedented operational intelligence capabilities.” Elbit Systems will have a dedicated electromagnetic warfare section at its Paris Air Show, but said it won’t be displaying any drone-based EW systems.
For now, BriteStorm doesn’t incorporate artificial-intelligence enabled “genuine cognitive EW capability,” also due to the power requirements of AI, according to Lea.
“It’s clearly on our roadmap for the future, but we will have to understand how we incorporate some of the exceptionally rapid developments in machine learning and artificial intelligence onto a quite small payload that may have to operate autonomously,” Lea said, adding he doesn’t expect much in the way of public announcements there. “People will tend to be quite coy about that.”(Source: Defense News)
13 Jun 25. Global: Evolution of ransomware tactics underscores increased security risks facing businesses. On 12 June, the cyber security company Symantec reported that the ‘Fog’ ransomware operation is using legitimate open-source tools to conduct cyber operations. The group typically uses stolen credentials and/or exploits software vulnerabilities to infiltrate targeted systems. It then conducts ‘pass-the-hash’ attacks to escalate privileges; it subsequently deploys open-source tools to mimic legitimate activity and enhance detection evasion. In May, Fog used a legitimate employee monitoring software (‘Syteca’) against an unnamed financial institution in the Asia-Pacific region to collect sensitive employee information. The group also employs backdoors, system monitoring utilities and other remote execution tools to establish communication with command-and-control (C2) infrastructure, as well as to maintain its persistence, exfiltrate data and conduct additional malicious activity. Fog then disables security tools before encrypting all system files. We assess the adoption of open-source software marks a departure from traditional ransomware tactics, underscoring the increased security risks stemming from the continuous evolution of ransomware operations. (Source: Sibylline)
16 Jun 25. Chess Dynamics, part of the Cohort plc Group, has successfully demonstrated the exceptional capabilities of its Vision4ce Deep Embedded Feature Tracking (DEFT) technology during the comprehensive WINTERMUTE 3 trial with the Defence Science and Technology Laboratory (Dstl). The rigorous testing event provided one of the most challenging scenarios possible, featuring multiple targets including sea vessels, helicopters, drones and land vehicles operating simultaneously in cluttered backgrounds with varied visibility conditions. Chess Dynamics’ Vision4ce tracking software, deployed on the Hawkeye Multi Sensor (Hawkeye MS), delivered robust performance that met high expectations across both daylight and infrared sensors, even when contrast was low.
The DEFT AI algorithm demonstrated exceptional tracking capability, maintaining robust target lock in complex and cluttered environments while adapting dynamically to changes in contrast, target size, orientation and movement patterns. The system’s fine-grain classification capability distinguished between different vessel types – a critical requirement for autonomous navigation and maritime law applications.
Key performance highlights included:
- Outstanding closed-loop performance with highly dynamic targets, showcasing the advanced capabilities of both the Hawkeye MS platform and Vision4ce technology
- Market-leading infrared capability with clean, low-noise imagery that clearly identified thermal signatures and points of interest
- Robust all-weather performance maintaining detection and tracking capabilities across varied environmental conditions
- Reduced operator burden through intuitive joypad controller interface and reliable tracking once targets are selected
The Hawkeye MS proved extremely reliable, robust and accurate throughout the week-long trials, which included daily dismantling and setup procedures, with no technical issues encountered. The platform’s precision movement capabilities and strong motors effectively counteracted wind conditions while maintaining exact positioning.
Steve Hogg, Director of Image Processing at Chess Dynamics, said: “These trials validated our Vision4ce technology’s exceptional performance in real-world conditions and confirmed we are very close to achieving ‘point and shoot’ capability with high-quality data on auto mode, requiring minimal operator training. The DEFT tracking system’s ability to maintain accurate target identification and tracking in such challenging multi-target scenarios demonstrates our market-leading position in AI-driven surveillance solutions. This performance validation builds crucial credibility beyond our internal testing and proves our technology is ready to meet the evolving demands of modern defence applications.”
The successful trials enabled Chess Dynamics to identify specific failure cases, driving a streamlined and automated process for rapid iteration, development and deployment of enhanced AI models. The comprehensive testing provided rare opportunities to validate system ease-of-use and gather critical user feedback from military end-users. A DSTL Spokesperson commented, “We were delighted to be able to try out Chess’s object detection and tracking system at WINTERMUTE 3 trial which provided a challenging set of multiple fast crossing and weaving boats. The joypad controller interface is very natural and intuitive to use, and we were impressed with the rock-solid tracking once a boat was selected.” DEFT represents Chess Dynamics’ latest advancement in real-time video and image processing solutions for electro-optic systems, designed to provide advanced autonomous capabilities while reducing training requirements and operational complexity. For more information, please visit www.chess-dynamics.com
13 Jun 25. Cyber Update Key points.
- A new variant of the ‘Mirai’ botnet will sustain elevated security and disruption risks for vulnerable video recording devices (see Sibylline Cyber Daily Analytical Update – 9 June 2025).
- A destructive cyber operation has underscored the security risks facing global businesses via malicious npm packages (see Sibylline Cyber Daily Analytical Update – 10 June 2025 and our Technical analysis below).
- A spike in distributed denial-of-service (DDoS) attacks has underscored the elevated security and disruption risks facing the financial sector see our Technical analysis below).
- A new cyber attack methodology (‘SmartAttack’) is showcasing the security risks facing air-gapped environments via smartwatch devices.
- Evolving cyber tactics have underscored the increasing security risks stemming from the ransomware operation ‘Fog.’
Technical analysis of weekly stories
Unnamed threat actors are targeting global developers in a destructive cyber operation that starts with attackers injecting npm packages (‘express-api-sync’ and ‘system-health-sync-api’) with malicious code. The packages are typically used by developers to download application programming interfaces (APIs) that enable data syncing between two applications. However, the modified packages covertly install backdoor malware onto compromised systems. Express-api-sync uses flexible parameters to facilitate remote command execution; it then deletes all system files (including source codes, configuration files and local databases), effectively rendering the system unusable. System-health-sync-api contains several data syncing and configuration capabilities to feign legitimacy. The package also collects significant amounts of system information before deleting a system’s files; it can operate across several different systems, highlighting its sophistication compared to express-api-sync. Both packages use the Simple Mail Transfer Protocol (SMTP) to conceal command-and-control (C2) communication and to enhance detection evasion. The packages also create three endpoints upon execution to ensure platform-specific file deletion in case one of the endpoints fails. The attacks reportedly leave no trace of their execution, further showcasing the threat actors’ advanced capabilities. The Fog ransomware operation uses legitimate open-source tools to conduct cyber operations. The group typically employs stolen user credentials and/or exploits patched software vulnerabilities (including CVE-2024-40711); it often targets Microsoft Exchange servers to infiltrate systems. It then typically conducts pass-the-hash attacks to escalate privileges and to deploy open-source tools so as to mimic legitimate activity and enhance detection evasion. In May, Fog used legitimate open-source employee-monitoring software (‘Syteca’) against an unnamed financial institution in the Asia-Pacific region to collect sensitive employee information. Fog also executed several commands to remove traces of Syteca and other evidence of its deployment, highlighting the group’s obfuscation efforts. The group also employs backdoors, system-monitoring utilities and other remote execution tools to establish communication with command-and-control (C2) infrastructure, as well as to maintain persistence, exfiltrate data and conduct additional malicious activity. This includes the open-source tool ‘GC2’ (which Fog employs to exfiltrate sensitive files that use Google Drive and/or Microsoft SharePoint) and the C2 beacon ‘Adaptix’.
Non-exhaustive recommendations to mitigate against these threats include:
- Monitor devices and networks for suspicious activity
- Add available Indicators-of-Compromise (IoCs) to your organisation’s security systems to detect potentially malicious samples on the network; configure firewalls to block outbound communications to malicious IP addresses associated with any known malware
- Adopt behaviour-based end-point detection and response (EDR) solutions, prioritising the detection of the initial stages of a compromise
- Conduct cyber hygiene awareness courses for users, enabling them to recognise and report phishing and other types of social engineering
Our cyber word(s) of the week: Pass-the-hash attack (Source: Sibylline)
13 Jun 25. Rohde & Schwarz introduces the brand-new FSWX signal and spectrum analyzer, the first multichannel signal and spectrum analyzer with multiple input ports, unlocking new possibilities in signal analysis. It is also the first instrument of its kind with a cutting-edge internal multi-path architecture enabling a novel cross-correlation feature. Combined with its low phase noise for high signal purity, its spurious-free dynamic range and its outstanding residual EVM, the FSWX delivers an RF performance like no other signal and spectrum analyzer in the market. The instrument’s wide internal bandwidth of 8 GHz allows for comprehensive analysis even of complex waveforms and modulation schemes. Combined with a high measurement speed and analysis tools tailored to the user’s needs, the FSWX brings new levels of performance and precision to signal analysis for modern RF applications – from active RF components testing to state-of-the-art automotive radar testing to complex airborne radar scenarios and satellite test in A&D applications to the latest test challenges in WLAN and cellular technologies like 5G and beyond.
Michael Fischlein, Vice President Spectrum & Network Analyzers, EMC & Antenna Test at Rohde & Schwarz, is thrilled to introduce the new FSWX: “Our team has truly re-imagined signal and spectrum analysis technology with our new FSWX. They have come up with an innovative architecture and design to empower our customers to tackle complex measurement scenarios in the evolving landscape of wireless communications and radar technology that were previously unattainable. In other words, the FSWX makes measuring the impossible, possible.” The instrument’s innovative design features include multiple input ports, cross-correlation capabilities, advanced filter banks and broadband ADCs.
Multiple input ports
The multichannel FSWX offers the ability to measure multiple signal sources simultaneously, regardless of whether they operate at the same or different frequencies. With synchronous input ports, each featuring 4 GHz analysis bandwidth, users can seamlessly analyze the interactions between diverse signals. This opens up a multitude of new measurement scenarios, for instance, phase-coherent measurements of antenna arrays used in beamforming for wireless communications as well as in airborne and automotive radar sensors.
Multi-path architecture and cross-correlation
Its advanced internal multi-path architecture allows for the cross-correlation mode, a novel feature of the FSWX. A single signal input is internally split into two independent signal paths, each equipped with its own local oscillator and ADC. With this innovative design, advanced cross-correlation algorithms can be applied in the digital backend, effectively removing the inherent noise of the measurement instrument. This feature reveals spurs not easily seen without cross-correlation. It is especially helpful when, for instance, measuring Error Vector Magnitude (EVM), a critical factor in mobile communications. The added wideband noise of traditional signal and spectrum analyzers limits the accuracy and dynamic of EVM measurements. With the cross-correlation feature, however, the FSWX provides an unobstructed view of the DUT for precise EVM analysis. The internal multi-path architecture also offers advanced triggering options. For example, users can apply an IF or RF power trigger at distinct frequencies, as the multi-path design allows for independent frequency settings for each receive path behind the splitter. This way, the FSWX can easily reveal effects between two RF signals.
Advanced filter banks and broadband ADCs
Traditionally, for preselection in the microwave range, spectrum analyzers rely on YIG filters. Since they are known for their challenging frequency response, YIG filters need to be bypassed for wideband signal analysis. The FSWX, however, employs broadband ADCs in conjunction with filter banks that span the entire operating frequency range, allowing for pre-selected signal analysis while eliminating the need for YIG filters. The filter banks provide high precision, optimizing instrument settings for specific applications and significantly reducing the risk of unwanted signal images contaminating results. For users requiring narrowband applications, a YIG filter can still be added optionally.
Innovative firmware applications
The FSWX also provides innovative firmware applications such as the CrossACT (Cross Application Control and Triggering) firmware feature. It synchronizes various measurements across different input channels, allowing for simultaneous analysis with multiple tools. This capability simplifies comparisons, such as determining whether the higher harmonics of a radar signal directly impact the EVM performance of a 5G signal. The Linux-based operating system of the FSWX provides a high level of security and long-term support, essential features for users in security-sensitive environments. This robust operating system ensures reliability and stability, making the FSWX an ideal choice for demanding applications.
Rohde & Schwarz will present its new FSWX signal and spectrum analyzer for the first time to the public at the IEEE MTT-S International Microwave Symposium (IMS) from June 17 to 19, 2025, at the Moscone Center in San Francisco, CA, at the company’s booth 1443.
——————————————————————————————————————————————————————————————————————————————————————————————————————————————–
Curtiss-Wright Corporation (NYSE: CW) has a long history with its roots dating back to Orville and Wilbur Wright’s first flight in 1903, and Mr. Glenn Curtiss, the father of naval aviation. In 1929, the companies founded by these three great aviation pioneers, the Curtiss Aeroplane and Motor Company and Wright Aeronautical Corporation, merged to form the largest aircraft company at the time, Curtiss-Wright Corporation.
We have continued on the path of innovation and advanced engineering, and have applied that expertise to a number of critical applications in high-performance markets. Our success has resulted in a world-renowned reputation for performance, long-standing customer relationships and significant growth and profitability in the markets in which we compete.
Today, we are a global, integrated provider of highly engineered, technologically advanced products and services. Our revenues are generated by providing our critical solutions through three segments: Aerospace & Industrial, Defense Electronics and Naval & Power, which support several of the largest, most vital industries in the world.
—————————————————————————————————————————————————————————————————————————————————————————————————————————————–