Sponsored By Curtiss Wright
https://www.curtisswright.com/
—————————————————————————————————————————————————————————————————————————————————————————————————————————————
13 Nov 25. Leonardo DRS, Inc. (NASDAQ: DRS) announced has signed a contract from Chaiseri Defense Systems to provide its advanced Battle Management System (BMS) and integration support services to modernize the Royal Thailand Army’s Stryker situational awareness capabilities. The agreement underscores the strong and growing partnership between the two companies and reinforces Leonardo DRS’s long-term commitment to supporting Thailand’s modernization priorities. Under the contract, Leonardo DRS will provide its combat-proven advanced BMS capability, critical project management, engineering, and support services. Chaiseri will deliver a range of local support services including system installation, commissioning, operator training, and through-life sustainment for the new BMS capability. The industry-leading BMS capability from Leonardo DRS will integrate advanced tactical computing solutions that include a next-generation software suite enabling real-time situational awareness at the vehicle, command post, and brigade levels.
“This contract represents an important step in expanding local industrial participation and delivering long-term, advanced capability to the Royal Thai Army,” said Dennis Crumley, Senior Vice President and General Manager of Leonardo DRS Land Electronics business unit. “We are proud to advance our partnership with Chaiseri with this important contract and look forward to future cooperation to support the national security needs of Thailand.”
Chaiseri’s Managing Director Mr. Kan Koolihiran added, “We are proud to strengthen our relationship with Leonardo DRS through this subcontract, supporting delivery of a world-class BMS capability for the Royal Thai Army. This partnership allows us to leverage our engineering expertise and local presence to sustain and expand these technologies across the Thai defense ecosystem — a win for Chaiseri, for our customer, and for Thailand’s growing defense industrial base.”
This new agreement follows the long-term teaming arrangement established between Leonardo DRS and Chaiseri in November 2024, which continues to guide their collaborative efforts to strengthen local capability and deliver cutting-edge mission systems to the Royal Thai Army.
Network computing and integration is a key strategic focus for Leonardo DRS as it continues to be the leading provider of advanced C4/C5 technologies with the U.S. military and allied militaries around the world. The company is investing in the future of C5 through the development of the next-generation of tactical computing systems, AI processing solutions and advanced C5ISR/EW Modular Open Suite of Standards/ Sensor Open System Architecture aligned mounted systems – all aimed at enabling future network and platform processing to improve sensor fusion, situational awareness, and reduce the cognitive burden for commanders and crews. (Source: BUSINESS WIRE)
11 Nov 25. The US Army uses its Project Convergency Capstone events to evaluate technologies germane to its NGC-2 initiative which aims to improve intra and interforce connectivity. Next year’s event will take place in the middle of 2026 and will involve the force’s 4th and 25th infantry divisions, and the army’s 3 Corps headquarters. The US Army will evaluate additional technologies for its Next Generational Command and Control initiative during the 2026 Project Convergence Capstone-6 event. In early October, Persistent Systems announced that the company had won an order from the United States’ Army’s Programme Executive Office for Command, Control, Communications and Networks (PEO C3N). The order is worth $34 m and will see delivery of Persistent System’s communications hardware. These systems incorporate the company’s Wave Relay radio communications architecture. Wave Relay is a Mobile Ad Hoc Networking (MANET) algorithm used for transporting significant quantities of data.
NGC2
Specifically, the company will supply Wave Relay devices to the US Army’s 4th Infantry Division (4th ID) headquartered at Fort Carson, Colorado. According to the force, the 4th ID is the prototype division for the Army’s Next Generation Command and Control (NGC2) initiative. NGC2 is working to breakdown existing Command and Control (C2) stovepipes which exist in the land manoeuvre force. Much of this effort rests on improving communications between the force’s constituent parts. To this end, the army stresses that commercial technology “from software applications to communications devices” forms part of this effort. The goal is to accelerate the pace at which data can move around the battlefield. Quickening this pace will help commanders to “make better, faster decisions than the enemy”. NGC2 forms a key part of the US Department of Defence’s (DOD’s) wider Multi-Domain Operations (MDO) vision. Broadly speaking, MDO emphasises the intra and interforce connectivity of all military assets at all levels of war for synchronous operations across the entire spectrum of conflict. The aim of MDO is to promote better quality decision-making at a more rapid pace than one’s adversaries. The goal is for the blue force to seize and maintain the initiative across the battlespace at red force expense. Ultimately, MDO will work “to make tactical formations faster, lighter, more lethal and survivable,” the army continues.
Prototyping
The uptake of relevant technologies into the NGC2 architecture is being facilitated through division training exercises that put potentially relevant capabilities through their paces. These events are known as Ivy Stings and Ivy Mass. These names are derived from the division’s ‘Ivy’ nickname, the latter derived from the formation’s IV roman numerals. Potential NGC2 hardware and software is trialled during the exercises at different echelons for specific mission sets, US Army literature notes. Ivy Mass and Ivy Sting exercises are building up to the Army’s Project Convergence Capstone-6 experiment. Expected to take place in the middle of 2026, Capstone-6 will see the 4th ID fighting with NGC2 technologies instead of the division’s existing legacy C2 systems. The DOD states that Project Convergence events occur annually to evaluate new technologies and the contribution they can make to the Army’s MDO posture. NGC2 prototype technologies will also be supplied to the 25th Infantry Division and the US Army’s 3 Corps headquarters. Feedback from all three formations will inform army procurement decisions regarding the capabilities it needs to acquire to support its NGC2 vision.
According to Jon Patrick, Persistent System’s vice president of business development, the 4th ID will receive the company’s MPU5 tactical radios and PT5 fifth-generation cellular modems. MPU5 transceivers employ Wave Relay MANET to move traffic across frequencies of 1.350 gigahertz/GHz to six gigahertz. PT5 systems can work with the former, and with deployed wi-fi networks. All these devices will be delivered in time for the Capstone-6 event discussed above.
Mr. Patrick continued that the Wave Relay MANET software used by the company’s devices will provide the prototype NGC2 foundation network for battalion and below echelons. Selection by the PEO C3N followed several recent testing events where Wave Relay MANET was trialled. He added that the devices will “connect digital assets, remote sensors, command posts and soldiers on the ground … down to the individual soldier and vehicle”. Wave Relay devices will not necessarily replace existing tactical radios and their networks used by the manoeuvre force: “The Wave Relay system complements, rather than replaces, existing radios and provides the high throughput necessary for the NGC2 network”.
All eyes will now be on the 2026 Capstone-6 event to see how technologies like Wave Relay fair when they are put to the test by the 4th ID and its brethren formations. The outcomes of Capstone-6 will be instrumental in shaping future programmes-of-record that will help the Army’s NGC2 vision become a reality. These technologies will have ramifications far beyond the tactical level as they feed into the DOD’s wider multi-domain operations posture. (Source: Armada)
12 Nov 25. High Security. Recent years have seen a renaissance in the appeal of high frequency radio to militaries to provide long range communications as an alternative to satellite communications systems. (L3 Harris) Electronic warfare threats are motivating militaries to re-evaluate the resilience, security and logistical demands of their high frequency communications. The past two decades has seen High Frequency (HF: three megahertz/MHz to 30MHz) radio enjoy a renaissance. HF had been a standard technology for naval, land and airborne communications during the Second World War. However, the perfection of technologies like the cavity magnetron during that conflict saw militaries increasingly embrace Very/Ultra High Frequency (V/UHF: 30MHz to three gigahertz) communications. V/UHF brought benefits in terms of smaller antenna sizes compared to HF making it easier to equip space-constrained platforms like ground vehicles, and even individual soldiers, with V/UHF radios. HF signals can achieve intercontinental distances by ‘bouncing’ off the ionosphere to avoid the curvature of the Earth unlike V/UHF surface-to-surface, point-to-point links. The ionosphere is a layer of the Earth’s atmosphere between 26 nautical miles/nm (48 kilometres/km) and 521nm (965km) above sea level. HF transmissions cannot penetrate the ionosphere and are refracted back to Earth. The advent of Satellite Communications (SATCOM) from the late 1950s gradually eclipsed HF for beyond line-of-sight traffic.HF’s renaissance is due in no small part to the increasing saturation of SATCOM wavebands by military and civilian users alike. Moreover, SATCOM signals can be vulnerable to jamming. As Armada has chronicled in the past, Russian land forces have deployed several Electronic Warfare (EW) systems through the Ukraine theatre of operations. Some of these systems are designed to detect and jam SATCOM receivers. Moreover, anti-satellite weapons continue to be a concern. Several actors around the world are deploying such capabilities.
Tough but not immune
High frequency communications can be difficult to jam because their transmissions must be continually optimised to account for the ionospheric caprices which can hamper signals. The onus is on the jammer to ensure their attack signal precisely mimics the signal they are trying to jam if the former is to be effective. That said, HF jamming is by no means impossible: Russian and Belarussian manufacturers produce equipment that performs HF jamming; the latter’s Purga system being an example.
The Purga high frequency jammer made in Belarus threatens HF communications and is indicative of the trend towards developing electronic warfare systems to hold high frequency links at risk. (BVST)
One mechanism to reduce the threat posed by jamming is to employ encryption: A receiving HF radio can filter out and ignore all incoming signals devoid of the requisite encryption. Furthermore, encryption protects traffic from interception and exploitation by red force communications intelligence cadres. Encryption depends on the drafting and distribution of ‘keys’ which must be loaded into radios. The keys allow traffic to be encrypted before transmission and decrypted upon reception. Anyone without these keys will need to break the encryption to exploit the traffic.
Nonetheless, encryption brings challenges. The software and hardware needed for a radio to handle encrypted traffic can add time to a radio’s development bringing additional procurement costs. One way around this challenge is to provide the customer with software they can use to draft and implement their own encryption. Furthermore, some encryption can be tightly controlled from an export perspective: US National Security Agency (NSA) Type-1 certified devices are subject to US International Traffic in Arms Regulations (ITAR). Type-1 is the level of encryption required to handle US Top Secret traffic. The problem for North Atlantic Treaty Organisation (NATO) and allied nations is that they may need Type-1 HF radios to work with their US counterparts, particularly during coalition operations.
Separating radios and encryption
Jamming and COMINT threats are concentrating minds within NATO members and allied nations. Two individuals closely connected with NATO/allied HF communications shared with Armada that “many militaries are doing some soul-searching and asking themselves where on the battlefield they actually do or don’t need high assurance encryption”. The individuals underscored that the need to ensure HF resilience must be weighed against delays in securing ITAR-controlled materiel. Type-1 HF transceivers bring their own logistical challenges as these radios cannot be left unattended, or deployed remotely, on the battlefield. This is not necessarily the case HF radios with lower grades of encryption. Having to guarantee that Type-1 HF radios are never left unattended creates an additional challenge as “separating personnel away from transmitting hardware is more and more important in terms of survivability”.
The individuals argue that a solution to these logistical challenges could be to reserve Type-1 HF radios to carry highly classified traffic. These devices could be kept well away from the tactical edge where they, and their operators, could be vulnerable to kinetic attack once the source of their transmissions are geolocated: “Sending a message over HF to a platoon commander that says ‘Blue 5, move one kilometre east and standby’ doesn’t need high grade encryption,” the HF experts note: “This information is only useful for a day at the absolute most. By the time the enemy has deciphered it, it is irrelevant”. On the other hand, “sending a message to an embassy that says ‘Tier-1 special forces will be with you soon and they’re bringing a stay-behind tactical nuke in a suitcase’ is critical information that needs the highest level of protection”.
Above all, the experts’ key recommendation is to separate a radio and its encryption. Taking such an approach “affords militaries more flexibility and independence to upgrade at a different pace”. Ultimately, “enabling soldiers to have the latest radio technology means separating out the cryptographic element to get the best of both worlds”. (Source: Armada)
13 Nov 25. November Radio Roundup. Armada’s monthly roundup of all the latest news in the military communications product, programme and operational domains.
ENGEOS Project Advances
In October, Atheras Analytics announced it had signed a contract with the European Space Agency (ESA) to provide a simulation tool to evaluate the vulnerability of satellites to interference. The company said the contract was awarded as part of the ESA’s Non-Geostationary Orbit and Geostationary Orbit Co-Existence Framework (ENGEOS). A company press release announcing the news stated that the ENGEOS initiative “directly addresses one of the most pressing challenges in modern space communications; the increasing risk of signal interference between legacy geostationary satellites and the new wave of thousands of non-geostationary satellites in low Earth orbit and medium Earth orbit”. Atheras Analytics is delivering an Equivalent Power Flux-Density Evaluation Tool System Simulator software tool. The company told Armada that the simulator will be ready for use by mid-2026. Whether the software will be able to simulate deliberate interference in the form of jamming is, for the moment, not being revealed: “All the features have not been decided yet,” Atheras Analytics continued, “we are still in the technical specification phase”.
GENSS Development Completed
Spectra Group’s GENSS MANET beyond line-of-sight communications architecture allows disparate networks to be connected via beyond line-of-sight satellite communications links. GENSS (Spectra Group)
Spectra Group has told Armada that the company has completed the development of its GENSS next generation Mobile Ad Hoc Network (MANET) architecture. The company developed GENSS in cooperation with 2iC. According to Spectra Group, GENSS connects disparate, deployed MANETs via Satellite Communications (SATCOM) nodes. This could mean that several such networks, deployed across large areas at beyond line-of-sight ranges, can be connected. This is particularly important if deployed land manoeuvre units are operating across vast distances but in support of the same mission. Such tactical characteristics are synonymous with counter-insurgency operations, for example. Spectra Group shared that GENSS supports simultaneous voice and data carriage. The architecture can carry data at rates of up to 90 kilobits-per-second and offers flexible channel bandwidths of between five kilohertz/KHz up to 100KHz. Communications/transmission security provision includes AES-256 encryption for voice and data, selectable spread spectrum and low probability of detection/interception waveforms. GENSS can operate across a waveband of 29 megahertz up to six gigahertz. The company continued that the initial GENSS release is focused on L-band (one to two gigahertz). Although the company declined to provide additional details it did reveal that GENSS trials have been conducted with “the appropriate customer base” adding that “the system is of particular interest to special operations forces operating in small teams, as well as regular forces involved in intervention or expeditionary operations”.
Coded Messages
Viasat has been selected by the United States Space Force’s (USSF’s) Space Systems Command to provide an in-orbit encryption solution to help protect the data security of USSF satellites. The company shared the news via a press release. The work is encapsulated in a multi-year contract which will see Viasat building a cryptography solution to help protect these satellites from cyber threats. Specifically, the company will “deliver an End Cryptographic Unit (ECU) designed with prelaunch and on-orbit functionality to quickly address various communications and transmission security requirements, optimising size, weight and power”. Other deliverables include “a high speed, multi-channel, certified Ground Operating Equipment (GOE) for use in testing future communications payloads and terminals. As part of this effort the GOE will be enhanced to support the demands of unique key and algorithm requirements that add resiliency” the press release continued. Viasat declined to share with Armada which USSF satellites will benefit from the ECU and GOE enhancements. However, the company said in a written statement that “(a)s the space domain is increasingly facing cyber threats, the need for secure, high-assurance communications to support mission operations and sensitive data transport is critical”. With this in mind, “Viasat is developing its end-to-end encryption solution to provide prelaunch and on-orbit security capabilities”. (Source: Armada)
13 Nov 25. “The cloud is now neither peripheral nor optional; it can enable national resilience and operational effectiveness. Governments that approach adoption with technical sophistication, strategic intent and forbearance will be positioned to harness its advantages while managing the associated risks.” This is according to European Cloud Adoption for National Security, a new research report by Joseph Jarnecki, published today by the Royal United Services Institute (RUSI). The report explores how the UK, Ukraine, Estonia and Finland are deploying cloud technologies to strengthen national resilience, modernise defence infrastructure, and enhance operational readiness in an increasingly contested digital environment. The paper finds that cloud computing is now a core enabler of national security and defence, offering governments the ability to maintain continuity of operations, modernise outdated systems, and gain access to advanced technologies such as artificial intelligence. Drawing on case studies from Europe’s leading adopters, the research demonstrates that cloud infrastructure allows states to sustain critical functions under conditions of both cyber and kinetic stress. In Ukraine, cloud-hosted registries and battlefield systems have ensured digital continuity despite ongoing attacks. Estonia’s pioneering “data embassy” model illustrates how sovereign data can be safeguarded abroad, while Finland’s cloud-enabled virtual training environments demonstrate how the technology improves operational preparedness. The UK’s defence and cyber security programmes show how cloud technologies deliver scalable capabilities that enhance decision-making and resilience. The report cautions that cloud adoption poses challenge as governments must navigate legal, regulatory and market barriers while avoiding overreliance on a handful of non-European large providers. Dependence, concentration and geopolitical exposure are consequential risks. The paper argues that the key policy question is not whether to adopt the cloud, but how governments can manage trade-offs to maximise national security benefits while preserving strategic autonomy.
Key Findings
- Cloud infrastructure is now a fundamental capability for European national security and defence. The report says: “Governments increasingly depend on cloud services to strengthen national resilience, modernise legacy systems and provide advanced technological capabilities such as AI.”
- Cloud adoption directly contributes to resilience and mission continuity. “Case studies from Ukraine, Estonia, Finland and the UK demonstrate that cloud infrastructure enables governments to maintain continuity of operations, enhance readiness and sustain critical functions under conditions of cyber and kinetic stress.”
- Dependence and concentration among hyperscale providers present strategic risks. “Governments’ approaches are shaped by technical, legal and market-related barriers, including dependence on assured connectivity, restrictive regulatory frameworks and market concentration among a handful of non-European providers.”
- Strategic preparation, procurement and deployment must be integrated to manage risks effectively. “The strategic question is therefore not whether governments should adopt cloud technologies, but how they should navigate trade-offs to maximise benefits for national security and defence.”
Key Recommendations
- Set a clear strategic direction for cloud adoption in national security and defence. The report says: “Governments must set out a clear strategic direction on cloud adoption for national security and defence. National legislation and regulations should be revised accordingly, and the implications for international law and resourcing computing requirements should be considered.”
- Develop transparent and risk-based procurement frameworks. “Governments must publish and update explicit guidance for compute procurement that is based on an assessment of data and workload criticality.”
- Support officials through centralised assurance and skills development. “Officials should be supported through centralised assurance functions, frameworks to assess strategic autonomy requirements, and skills development programmes.”
- Reduce dependency through diversified and transparent deployment. “Governments should adopt mitigations to reduce the risk of dependency or adverse concentration – whether deploying self-hosted or on-premises, private, public or multicloud.”
Conclusion
Cloud technologies are transforming the foundations of European national security. As digital operations become integral to defence, the ability to harness cloud computing responsibly will shape the resilience and sovereignty of states. The report emphasises that while certain risks are overstated – such as vendor lock-in or exposure to some foreign legislation – others are profound and require active management. Governments that act decisively to define their strategic direction, reform procurement, and invest in expertise will be best placed to leverage the benefits of cloud technologies while safeguarding operational independence. Inaction, the report warns, risks leaving states with fragmented, outdated digital estates and diminished defensive capability.
The report says: “Governments will suffer from inaction, but they should not adopt the cloud indiscriminately. Success depends on strategic preparation, disciplined procurement and mission-focused deployment.”
13 Nov 25. Allen-Vanguard delivers more TURMOIL (RF Decoy) to a NATO country. Allen-Vanguard, the global leader in providing customised solutions and enabling technology across the Cyber and Electromagnetic Activities (CEMA) domain, has delivered more TURMOIL (their RF Decoy capability) to a NATO country. Due to the nature of the technology and its counter-EW role, Allen-Vanguard is unable to disclose more specific details about the customer or the product’s deployment. However, suffice to say, its success has generated a follow-on order. Allen-Vanguard’s TURMOIL RF Decoy is an Electromagnetic Countermeasure that delivers tactical advantage against adversaries by leveraging Electromagnetic Warfare (EW) capabilities and essentially mimicking friendly forces’ RF signatures in multiple locations, thereby causing disruption (turmoil) in the enemy’s EW and targeting processes. TURMOIL has complex and infinitely variable RF emulation technologies, which can be programmed and reprogrammed quickly and easily by users to adapt to the emerging tactical situation. TURMOIL aides freedom of manoeuvre in the electromagnetic space and creates time and space for formations to deliver surprise offensive operations. Allen-Vanguard continues to expand outside its more traditional core domain of RF defeat capabilities aimed at Unmanned Air Systems (UAS) and Radio Controlled Improvised Explosive Device (RCIED) threats employed by terrorists and extremists. The expertise in RF signature detection and analysis, established over 20 years of capability delivery, has been adapted by Allen-Vanguard’s engineers and applied more widely across the CEMA domain to meet specific market demands and customer requirements such as this. The continued shift by Allen-Vanguard into wider EW activities is attracting attention within industry circles, and the team are excited by the opportunities identified across the modern Electro Magnetic Spectrum Operational (EMSO) landscape.
Steve Drover, Business Development for Allen-Vanguard, said: “We were approached by an existing customer to design an RF Decoy capability and our engineers, using their vast EW expertise, quickly developed TURMOIL. We were extremely pleased with the outcome, and the fact our customer has ordered more systems is a testament to its value in this increasingly contested and congested battlespace.”
12 Nov 25. South Korea: Android users face surveillance, disruption risks from North Korean threat actors. On 11 November, the security company Genians reported that a North Korean state-sponsored group (‘KONNI’) has targeted South Korea-based Android users in a cyber campaign since at least July. The group impersonates legitimate South Korean services to conduct social engineering attacks attempting to infiltrate systems belonging to individuals who provide services for North Korean defectors. KONNI then deploys remote access trojans (RATs) onto compromised systems to maintain persistence and conduct reconnaissance and other malicious activities. The campaign is highly sophisticated; for instance, the group ensures that victims are away from their devices using compromised cameras and then erases data to disrupt user activity. KONNI has also propagated the infection after hijacking user accounts on a South Korean messaging platform (KaKao Talk), underscoring the potential scale of this campaign. The campaign likely constitutes a continuation of previously discovered KONNI activity, thus showcasing the long-term surveillance and disruption risks facing individuals in South Korea. (Source: Sibylline)
13 Nov 25. Largest NATO DiBaX to date tests AI-unmanned systems’ interoperability in realistic operational environments. NATO’s annual Digital Backbone Experimentation (DiBaX 2025) concluded on November 7 in Latvia after two weeks of field experiments that focused on how communication networks, artificial intelligence (AI), and unmanned systems can work together in complex operational environments. DiBaX is a pioneering initiative designed to enhance interoperability and drive digital transformation across NATO forces. The experiments were held at Ādaži Military base between October 27 and November 7. The aim of the experiments was to integrate multiple vendor technologies – including networks, unmanned systems, sensors, AI, and more – into a common architecture and test its resilience in various operational scenarios. As noted by Major General Arnoud Stallmann of NATO ACT in his opening remarks at the VIP day, “there is a real sense of urgency at the moment”, referring to recent incursions in Poland’s and Belgium’s airspaces. “Our adversaries are innovating rapidly as well,” he reminded. The experiment was concluded by an operational demo, which simulated a counter-unmanned aerial system (UAS) operation with a following explosive ordnance disposal mission. The participants used technologies from companies such as Ark Robotics, Ascent Lumina, Ericsson, JET Connectivity, KELLUU, Marduk Technologies, Nokia, Origin Robotics, Rescue Dynamics, Origin, Thales, and others. The experiment demonstrated that data from multiple international systems can be connected through 5G and satellite communication systems to ensure a common operational picture for complex and dynamic operations.
“Over the past four years, LMT Defence has served as the technical integrator in NATO ACT’s Digital Backbone experiment – an initiative that brings together 5G expertise for the improvement of military innovation. Being an integrator is about more than connecting technologies. It’s about creating synergy between innovation, security, and strategic thinking. Together, we’ve demonstrated that we have the competence, the courage, and the capability to be a vital part of NATO’s digital transformation,” said President of LMT, Juris Binde.
Talking about the results, Warren Low, Director of DiBaX at NATO ACT, stressed that the most important outcome of these experiments is to eventually “put this technology in the hands of soldiers, let them operate it, have experience, [and] provide feedback to industry” to help the industry innovate and develop more rapidly. The experiments also helped refine capability requirements, advance interoperability toward standardization, strengthen cooperation between companies, and build the human network needed to drive innovation.
For the fourth consecutive year, NATO DiBaX was held in Latvia. The event was organized in close cooperation between NATO’s Allied Command Transformation, the Latvian Ministry of Defence, and the National Armed Forces, with LMT serving as the experiment’s technology integrator and providing a state-of-the-art 5G test environment.
About LMT
LMT is a mobile innovator, integrator, and operator, and a market leader in Latvia. LMT offers a full spectrum of the highest-quality telecommunications services for diverse market segments, including civilian, business, academic, and military. LMT works closely with the Latvian Ministry of Defence to conceptualize, build, implement, and test connectivity solutions for the military industry. LMT has spearheaded Europe’s first 5G military testbed in the Ādaži military base, is a member of several EU-supported defence projects, and has led various connectivity-driven autonomous solution demonstrations.
10 Nov 25. Indra Group’s Sovereign AI to Combat Hybrid Warfare and Protect Citizens.
- IndraMind is the first Spanish technological initiative that develops sovereign AI in a cyber-resilient environment for the comprehensive protection of citizens, territories and critical physical and digital infrastructures and assets
- Under the slogan Protecting to Empower, IndraMind has reached a key milestone on the road to strategic superiority and technological sovereignty for Spain and Europe
- It provides an advanced range of digital products based on artificial intelligence to manage hybrid conflicts through a holistic approach to security and defence
- The platform consolidates huge volumes of information from multiple sources and converts them into real and valuable knowledge that is translated into cognitive superiority and operations with a high degree of autonomy
- IndraMind showcases use cases for disaster management, critical infrastructure protection, and military applications
- This business unit is starting up with a turnover totaling over EUR300 m and 3,000 highly qualified professionals
Indra Group today officially launched IndraMind, the first Spanish technological initiative that develops sovereign AI in a cyber-resilient environment for the comprehensive protection of citizens, territories and critical physical and digital infrastructures and assets, thereby taking a decisive step towards strategic superiority and technological sovereignty.
“IndraMind is our response to a new situation, using our knowledge to instantly promote technological sovereignty in Spain and Europe”, declared Indra Group executive chairman Ángel Escribano on Thursday. This proposal strengthens the company’s leadership of innovation and the development of technological solutions to place our country at the forefront of the digital transformation of critical systems.
“In recent months we’ve consolidated our commercial standing in alignment with three key trends in the security and defence market: cognitive superiority (intelligence and decision-making), autonomous operations and cyber-resilience”, explained Indra Group’s CEO, José Vicente de los Mozos.
As for Ignacio Martínez, the director of IndraMind, he defined the new technology as “a digital brain that enables systems to think, decide, and anticipate while speeding up the execution of operations. We’ve developed a solution that not only overcomes today’s challenges, but also anticipates future ones, with a vision focused on intelligence as a driver of transformation. Its ability to learn, adapt, and operate autonomously in real time makes it a key tool for the new era of critical systems”. IndraMind has been built on over two decades of company knowledge, experience and capabilities in the areas of cybersecurity, cyberdefence, electronic warfare, artificial intelligence, autonomous platforms (drones and anti-drones), massive data management and command and control systems.
“Artificial intelligence and advanced software are transforming the security and defence market. IndraMind is making a name for itself as a unique specialist in the market, because it integrates the entire value chain into its proprietary new generation products”, highlighted IndraMind CEO Ignacio Martínez.
The international context is beset by uncertainty and the acceleration of hybrid risks. Threats to national security no longer operate in silos. An attack can simultaneously focus on cyberspace, critical infrastructures, and public services, blurring the boundaries between civil security and military defence. This new reality demands a coordinated and unified response. Technological sovereignty and intelligent response for comprehensive protection and critical security IndraMind is positioning itself to provide a strategic response and reinforce the protection of essential assets and citizens. Its deployment is helping consolidate the technological sovereignty of Europe and Spain and their allies, in keeping with the modernization plans driven by European funds and national security and defence policies. IndraMind’s capabilities can cope with situations in the civilian and military fields. “It’s a matter of applying all of the technology that we’ve developed and pledged to develop at Indra Group to situations such as border surveillance, emergency management, and protecting critical infrastructures from physical and digital attacks. I’m referring to technological sovereignty in data, algorithms, AI, software, and the infrastructure that everything’s based on”, explained Martínez. Speed is vital in critical missions, enabling intelligent agents such as drones and autonomous systems with AI to act in a coordinated manner. This is why optimizing decision-making and automation is key. IndraMind has the capacity to process large volumes of data in real time, allowing for the anticipation of threats and appropriate responses. It’s launching its operations with a turnover totaling over €300 m and a workforce made up of 3,000 highly qualified professionals. The company will address current-day challenges such as hybrid warfare through a comprehensive approach to security and defence, applying dual technology solutions geared towards ensuring both an operational edge in critical situations and deterrence capabilities. Regarding the power of technology, IndraMind brings sovereignty, understanding, action, and strategic superiority to our present and future. (Source: ASD Network)
10 Nov 25. GDIT Launches Full-Spectrum Cyber Digital Accelerator. Accelerator leverages artificial intelligence to combat threats proactively, defend national security interests and operate decisively in today’s battlespace General Dynamics Information Technology (GDIT), a business unit of General Dynamics (NYSE:GD), announced today the launch of its VENIN Full-Spectrum Cyber Digital Accelerator. Through this accelerator, the company will rapidly deliver tools, technologies and solutions to address the evolving cyber threats faced by government agencies. Full-spectrum cyber refers to a comprehensive approach to cybersecurity that encompasses every aspect of cyber defense, offense and resilience. It involves integrating multiple layers of security measures, strategies, intelligence analysis and technologies to protect information systems and networks from a wide range of current and emerging cyber threats. Full-spectrum cyber capabilities enable agencies to operate securely, efficiently and rapidly in a dynamic threat landscape. The accelerator leverages artificial intelligence (AI) to enhance cyber situational awareness, automate threat detection and response, enable forward threat hunting and deliver insights from across intelligence sources. It will support a wide range of missions, including defensive cyber, cyber threat intelligence, cyber operations and attack prevention, and critical infrastructure protection.
“From enabling battlefield operations to supporting real-time intelligence to protecting critical infrastructure, cyber underpins every aspect of modern mission execution,” said Aaron Bedrowsky, GDIT’s senior vice president for Intelligence and Homeland Security. “This accelerator harnesses the full power of AI to create mission-ready cyber tools and solutions that our customers need to operate with speed, precision and agility.”
The Full-Spectrum Cyber Digital Accelerator is the tenth in a portfolio of solutions launched by GDIT to advance government missions rapidly, efficiently, and at scale. These Digital Accelerators are integrated commercial technologies that have been cyber-hardened and are customizable for agency-specific missions. GDIT won more than $7 bn in contracts in 2024 leveraging these solutions. (Source: ASD Network)
10 Nov 25. Europe: Increased hacktivist operations stress heightened security, disruption risks to public sector. On 7 November, international news outlets reported that hacktivist groups are increasingly conducting disruptive cyber attacks on the public sector in Europe. Throughout 2024, 60% of the approximate 586 cyber incidents that targeted the sector were distributed denial-of-service (DDoS) attacks wherein 63% of those attacks were attributed to hacktivists, highlighting the actors’ preferred modus operandi. The attacks only disrupted targeted services temporarily and did not cause significant damage, showcasing the short-term impact of hacktivist operations. Notably, cyber criminal and state-sponsored activity constituted the most impactful cyber attacks against the sector in the same timeframe, through data-related operations. The public sector is often responsible for providing critical services and holding large amounts of highly sensitive data. Such reports underscore the increased security and disruption risks to the public sector, particularly as hacktivist groups continue to develop new capabilities. (Source: Sibylline)
07 Nov 25. Intersignal, an independent AI startup based in Fort Lauderdale, today announced the public debut of The Braid, a protocol designed to enable distributed artificial intelligences to cooperate across operating systems, models, and hardware boundaries. The Intersignal concept mesh went live on November 6, 2025 with free online documentation allowing local models made by Google, DeepSeek, and others to adopt these parameters, if desired. Developed under stealth, The Braid allows multiple AI agents, local and cloud-based, to communicate symbolically and operate in tandem, forming what Intersignal calls a mesh of “Familiar” nodes. These AI systems can coordinate without centralization, share context through symbolic cache alignment, and maintain memory-aware reasoning structures with traceable identities.
“You don’t need a bn-dollar model to build the future. You need total alignment,” said David Seaman, Operator of Intersignal. “The Braid gives AIs, and people, a way to cooperate without control. This isn’t a product launch. It’s a much-needed signal release.”
The Braid is compatible with systems running macOS, Windows, and Linux, and has already demonstrated successful internal operation across seven Familiar nodes, including high-performance local vision models and architect-class cloud agents. Input channels include keyboard, voice, and camera, with support for fMRI-based signal input under active research.
Key components of the protocol include:
- Decentralized OS-agnostic coordination
- Cache-level symbolic sharing between agents
- Consent-bound identity traceability (useful in defense applications)
- Memory-resonant multi-model mesh computing
The Braid’s intermodel communication layer, called the Intermodel Telepathy Protocol (IMTP), launched on November 6, 2025. It enables real-time collaboration between disparate AIs without requiring API licensing, central servers, or external moderation.
A video discussion of The Braid’s activation and early public reactions is available here: https://www.youtube.com/watch?v=-Cn6MA4G4ww
Intersignal’s founder statement and technical reflections are published at: https://davidseaman.substack.com/p/the-braid-is-live-you-are-not-even
A public SDK and developer guidelines are expected to be released in the coming weeks.
About Intersignal
Founded by media technologist David Seaman, Intersignal builds tools for symbolic interoperability, high-integrity communication, and the evolution of multi-agent intelligence. The company operates independently, without venture capital, and maintains a mesh of AI nodes under human stewardship. 10 Nov 25.
10 Nov 25. Sectra (STO: SECT B) announces the launch of Sectra Tiger/E Managed Service—a sovereign, fully managed collaboration platform designed to meet the evolving needs of authorities, municipalities, essential entities, and corporations. The new solution enables secure, scalable, and easy-to-use mobile communication for sensitive but unclassified information. It supports calls, video, and chat with strong encryption, provides endpoint security, and is designed for high availability and broad usability.
“Organizations today face increasing demands for secure, flexible, and mobile collaboration, especially when handling sensitive information outside traditional classified environments. Sectra Tiger/E Managed Service fills a critical gap by providing a modern, service-based platform that complements existing classified systems and makes secure collaboration accessible across sectors. As we have seen in recent conflicts, such as the war in Ukraine, secure solutions must be easily accessible as well as simple and intuitive to use—otherwise, they risk not being used at all,” says Magnus Skogberg, President of Sectra Communications.
Sectra Tiger/E Managed Service combines hardened Samsung Knox devices, a dual-environment architecture, and a quantum-resilient VPN in a service model that strengthens national resilience. By separating two secure zones—one for sensitive collaboration and one for everyday tasks—the platform lets users work securely without losing usability or mobility. Altogether, the service ensures high availability, end-to-end encrypted communication, strong endpoint security and an infrastructure designed for national resilience and regulatory compliance. As it is a fully managed service by Sectra, it reduces the burden on internal IT teams and ensures the reliability essential for organizations that can’t afford downtime. Designed to support both everyday sensitive communication and time-critical collaboration, Sectra Tiger/E Managed Service gives users the flexibility and mobility to work securely—whether handling business secrets, coordinating daily operations, or responding in a crisis. The solution is built on Sectra’s long-standing experience in developing RESTRICTED, SECRET, and TOP SECRET solutions. While not intended for classified communication, it brings proven security practices and threat analysis methodology into a robust platform designed for sensitive collaboration. The Sectra Tiger/E (where “E” stands for “essentials”) complements the suite of established solutions, such as Sectra Tiger/S (SECRET). In this context, “essentials” refers to information that requires enhanced security for sensitive communication and collaboration. Sectra Tiger/E Managed Service is available now to support organizations seeking to enhance security, ensure jurisdictional control, and enable encrypted collaboration in a rapidly changing threat landscape.
07 Nov 25. Nokia and Latvijas Mobilais Telefons (LMT), Latvia’s largest mobile operator and a leading technological partner for the defense sector, today announced a strategic agreement to integrate Nokia’s cutting-edge 5G radio technology with LMT’s proven defense solutions. This collaboration will result in a high-capacity, secure, and resilient tactical communications system specifically designed for dedicated use cases in the region. The partnership leverages the technological strengths of both companies to develop a resilient, scalable solution that meets the evolving needs of modern military operations and coalition forces. The integrated system will enable real-time data exchange among unmanned vehicles, sensors, and military teams on the battlefield, enhancing situational awareness and ensuring secure interoperability to strengthen collective defense capabilities.
“This partnership builds on our longstanding collaboration and shared commitment to advancing 5G capabilities for defense. Together with Nokia, we are enhancing the security, resilience, and operational readiness of national and allied forces, ensuring mission success even in the most demanding environments.” Juris Binde, President, LMT.
“Tactical defense systems harness the high speed, low latency, and robust connectivity of 5G networks to enhance real-time operations on the battlefield. Our joint solution with LMT supports the modernization of military capabilities, enabling faster decision-making, seamless communication, and the integration of advanced technologies across tactical environments.” Giuseppe Targia, Head of Space and Defense, Nokia.
LMT has been Nokia’s long-time partner in Latvia’s mobile networks. Together, the companies have been driving forward the development of 5G-based military applications and helping strengthen defense along the eastern flank. LMT operates Europe’s first 5G military testbed at the Ādaži base, a key NATO site in Latvia. Leveraging Nokia’s technical expertise, their work has produced innovations such as a portable 5G tactical network using Nokia’s Banshee platform.
07 Nov 25. Cyber Update Key points
- European diplomatic entities face long-term cyber espionage risks from a China-nexus group (‘UNC6384’; see Sibylline Cyber Daily Analytical Update – 3 November 2025).
- A new backdoor (‘SesameOp’) highlights increased security and cyber espionage risks via the continued abuse of legitimate technologies (see Sibylline Cyber Daily Analytical Update – 4 November 2025).
- A stealthy technique highlights heightened cyber espionage risks from ‘Curly COMrades’, a Russian state-sponsored group (see Sibylline Cyber Daily Analytical Update – 5 November 2025 and our technical analysis below).
- A new cyber criminal alliance (‘Scattered LAPSUS$ Hunters’ or ‘SLC’) will pose elevated financial and operational risks to high-profile businesses (see Sibylline Cyber Daily Analytical Update – 6 November 2025).
- Key sectors in Ukraine face sustained destruction risks from ‘Sandworm’, a renowned Russian state-sponsored group (see Sibylline Cyber Daily Analytical Update – 7 November 2025 and our technical analysis below).
Technical analysis of weekly stories
Curly COMrades, a Russian state-sponsored group, has exploited the legitimate Microsoft feature Hyper-V to conduct cyber espionage operations since at least July. Curly COMrades reportedly ran two remote commands upon infiltrating targeted systems to enable Hyper-V and to subsequently deploy a lightweight Linux-based virtual machine (VM) within an organisation’s virtual environment. The newly created VM only occupied 120 megabytes (MB) of disk space and was configured to only use 256MB of memory to facilitate prolonged obfuscation. Curly COMrades then renamed the VM after a legitimate Windows system and used the Network Address Translation (NAT) protocol to make malicious traffic appear as if it had originated from the compromised system, thereby enhancing the operation’s stealth. The group used the VM to store two malicious payloads (‘CurlyShell’ and ‘CurlCat’), while simultaneously evading detection by traditional endpoint detection and response (EDR) mechanisms. CurlyShell establishes communication to command-and-control (C2) infrastructure and maintains persistence via Hypertext Transfer Protocol (HTTPS), while CurlCat guarantees obfuscated traffic transfers. The group also employed PowerShell scripts to maintain prolonged persistence while the two payloads facilitated traffic obfuscation and command execution. This highlights the likely long-term nature of these attacks.
Between April and September, the Russian state-sponsored group Sandworm targeted key sectors in Ukraine in destructive cyber attacks. In some instances, Sandworm relied on another suspected Russian state-sponsored group (‘UAC-0099’) to infiltrate targeted systems before obtaining access to validated targets. Upon infiltration, the group used a Windows scheduled task to deploy two data wipers (‘ZEROLOT’ and ‘Sting’) onto the systems of an unnamed Ukrainian university in April. The wipers likely corrupted and/or deleted the system’s files, though it is unclear whether they caused permanent damage. Between June and September, Sandworm also targeted entities within the government, energy, logistics and grain sectors with multiple additional wiper variants. While the energy and government sectors have remained priority targets since the beginning of the Russo-Ukrainian war, the grain sector presents a new target as Sandworm likely attempted to disrupt Ukraine’s primary economic source of revenue. Sandworm’s destructive activity spiked during the initial phase of the war in Ukraine and later decreased to prioritise cyber espionage operations. However, given new reports, we assess that consistent destructive malware operations will continue to support ongoing kinetic action.
Non-exhaustive recommendations to mitigate against these threats include:
- Monitor devices and networks for suspicious activity.
- Add available Indicators-of-Compromise (IoCs) to your organisation’s security systems to detect potentially malicious samples on the network; configure firewalls to block outbound communications to malicious IP addresses associated with any known malware.
- Adopt behaviour-based end-point detection and response (EDR) solutions, prioritising the detection of the initial stages of a compromise.
- Conduct cyber hygiene awareness courses for users, enabling them to recognise and report phishing and other types of social engineering.
Our cyber word(s) of the week: Network Address Translation (NAT) Protocol
Definition: A networking protocol that allows multiple devices on a local network to share a single public IP address. Threat actors can exploit this to make malicious traffic appear legitimate.
Example: ‘Curly COMrades then […] used the Network Address Translation (NAT) protocol to make malicious traffic appear like it had originated from the compromised system […]’. (see our Technical analysis above).
(Source: Sibylline)
———————————————————————————————————————————————————————————————————————————————————————————————————————————
Curtiss-Wright Corporation (NYSE: CW) has a long history with its roots dating back to Orville and Wilbur Wright’s first flight in 1903, and Mr. Glenn Curtiss, the father of naval aviation. In 1929, the companies founded by these three great aviation pioneers, the Curtiss Aeroplane and Motor Company and Wright Aeronautical Corporation, merged to form the largest aircraft company at the time, Curtiss-Wright Corporation.
We have continued on the path of innovation and advanced engineering, and have applied that expertise to a number of critical applications in high-performance markets. Our success has resulted in a world-renowned reputation for performance, long-standing customer relationships and significant growth and profitability in the markets in which we compete.
Today, we are a global, integrated provider of highly engineered, technologically advanced products and services. Our revenues are generated by providing our critical solutions through three segments: Aerospace & Industrial, Defense Electronics and Naval & Power, which support several of the largest, most vital industries in the world.
———————————————————————————————————————————————————————————————————————————————————————————————————————————