Tag: Cybersecurity

Posted on

U.S. Navy News – December 11-19, 2024

Global News

NATO Aircraft Carrier to Visit West Pacific
France’s Charles de Gaulle Carrier Strike Group is scheduled to visit Japan in early 2025 during its Indo-Pacific deployment, with stops in Okinawa. This reflects NATO’s growing strategic focus on the region.

USS Savannah Makes Historic Cambodian Port Call
The Littoral Combat Ship USS Savannah docked in Sihanoukville, Cambodia, from December 16–20, marking the first U.S. Navy port call in Cambodia in eight years.

USS Harry S. Truman Enters Middle East Waters
The USS Harry S. Truman Carrier Strike Group transited the Suez Canal on December 15, bringing U.S. carrier presence back to the region after a month-long absence.

Strike Fighter Squadron (VFA) 151 Returns for Holidays
The “Vigilantes” of Strike Fighter Squadron (VFA) 151 returned to Naval Air Station Lemoore on December 14 after a 5-month deployment in U.S. 7th and 5th Fleet areas.

U.S. Navy Tests Hypersonic Missile
A successful test of the Common Hypersonic Glide Body showcased advancements in the Navy and Army’s hypersonic strike capabilities, achieving speeds at extended ranges.

U.S. Navy Awards Textron $106M for Mine Sweeping Technology
A new contract for the Mine Sweeping Payload Delivery System aims to expand semi-autonomous mine-clearing operations, ensuring maritime security.

U.S. Navy’s Next-Gen Jammer Completes First Deployment
Advanced electronic warfare systems, capable of disrupting enemy air defenses, completed their inaugural deployment with notable success.

New Constellation-Class Frigate Honors Female Naval Pioneer
The USS Joy Bright Hancock (FFG 69) will commemorate one of the first female Navy officers and her trailblazing contributions to military gender integration.

U.S. Navy Intercepts Houthi Attacks in Gulf of Aden
For the second time this month, destroyers USS Stockdale and USS O’Kane intercepted missiles and drones from Houthi forces in the Gulf of Aden.

Quantum Computing for Naval Applications
The Navy explores quantum computing for tasks such as simulating war games, enabling secure communications, and solving maintenance challenges, aiming for transformative operational impacts.

Congress Allocates $5.7 Billion for Virginia-Class Submarines
A stopgap funding bill includes significant investments for the Virginia-class program, emphasizing the importance of submarine force expansion.

U.S. Navy to Expand Constellation-Class Frigate Production
To mitigate delays, the Navy considers adding a second shipyard to accelerate the production of these versatile surface combatants.

China Watch
China Releases ‘Hit List’ Targeting U.S. Navy Systems
The PLA published plans to target U.S. Navy carrier groups, including AEGIS vessels and E-2C Hawkeyes, by overwhelming electronic warfare systems.

Pentagon Warns of China’s Growing Naval Power. The People’s Liberation Army Navy (PLAN) of China has significantly expanded its global reach over the past year, moving more frequently and in greater force beyond its regional waters. This growth is attributed to the ongoing development and deployment of advanced warships and logistics support vessels, which enable the PLAN to operate at greater distances from its home waters

Report: Despite Corruption Problems, China Progresses Toward Modernization
The Defense Department today released the annual “Military and Security Developments Involving the People’s Republic of China” report, a congressionally mandated annual report that offers insight into the capabilities, strategies and goals of China and its military.

China Conducts Largest Naval Drill in Decades Near Taiwan
A massive PLA naval exercise, involving 100 ships, heightened regional tensions as unannounced drills continued close to Taiwan.

Satellite Image Shows Chinese Aircraft Carrier Near Vietnam’s Shores. A satellite image captured on Tuesday reveals a Chinese aircraft carrier operating in the contested South China Sea, close to Vietnam’s coastline.

Russia Watch
Russia Disrupts Baltic Communications
Russian forces have interfered with mobile and maritime communication in the Baltic Sea, testing NATO’s response and posing risks to shipping and energy supplies.

Russia’s Investment in Underwater Drones Increases
Russia and other global powers advance unmanned undersea capabilities, focusing on drones capable of long-range and deep-sea operations.

Iran Watch
Iran’s New Drone Corvette Operates Undetected
The Shahid Bagheri drone corvette patrolled the Persian Gulf for weeks, showcasing Iran’s increasing maritime stealth capabilities.

U.S. Strikes Houthi Command Hub in Yemen
Retaliatory strikes on a Houthi hub responsible for launching attacks in the Gulf of Aden emphasized the Navy’s commitment to regional security.

Upcoming Developments
French Carrier Strike Group Deployment to Japan
France’s Charles de Gaulle Carrier Strike Group will reinforce Indo-Pacific partnerships in early 2025 with planned stops in Okinawa.

U.S. Navy’s E-130J Aircraft Contract Announced
A $3.5 billion contract for the E-130J “Doomsday Plane” will enhance nuclear command and control capabilities.

Posted on

How China’s Hacking of Navy Systems Threatens America’s Security


U.S. Fleet Cyber Command

Introduction:

China has been conducting aggressive cyber operations to steal sensitive data and disrupt critical communications infrastructure of the United States and its allies.

Recently, Chinese-backed hackers breached technology systems belonging to the U.S. Navy, targeting its assets on Guam, a strategic island in the Pacific.

This blog post will explain what we know about this hack, why it matters for America’s security and peace through strength, and what we can do to protect ourselves from such threats.

Americans for a Stronger Navy is a community-driven and membership-supported organization that advocates for policies and legislation that support the Navy’s ability to meet the challenges of a rapidly changing global security environment.

We believe that a strong and capable U.S. Navy is essential for protecting America’s interests and ensuring peace through strength. Join us today and help us promote a stronger navy for a safer world.

Summary:

The hack was carried out by a group called Volt Typhoon, which used legitimate credentials and small-office routers to gain access to the systems.

The hackers aimed to develop capabilities that could disrupt communications between the United States and Asia in a crisis. The Navy confirmed that it was impacted by the hack, but did not reveal the extent of the damage.

The United States and its allies issued a joint advisory on how to detect and prevent similar intrusions.

In this blog post, we will answer the following questions:

Who is behind the hack? A brief overview of the group’s history, motives, and techniques.

What was affected by the hack? A description of the infrastructure and sectors targeted by the hack, especially the Navy’s assets on Guam and their importance for regional security.

What’s being done to prevent or respond to the hack? A summary of the responses and actions taken by the United States and its allies, including Microsoft, the Five Eyes intelligence sharing organization, and the Cybersecurity and Infrastructure Security Agency.

Answers

Who is behind the hack? The hack was carried out by a group called Volt Typhoon, which is believed to be a state-sponsored actor based in China that typically focuses on espionage and information gathering.

The group has been active since at least 2021 and has targeted critical infrastructure organizations in Guam and elsewhere in the United States. Volt Typhoon uses legitimate credentials and small-office routers to gain access to the systems, disguising their origin and activity.

They also use custom versions of open-source tools to establish a command and control channel over proxy. The Chinese government has denied any involvement in the hack, calling it a “collective disinformation campaign” by the United States and its allies.

What was affected by the hack? The hack targeted key infrastructure like communications, electric and gas utilities, manufacturing, transportation, construction, maritime, government, information technology, and education sectors. The hackers aimed to develop capabilities that could disrupt critical communications infrastructure between the United States and Asia region during future crises.

One of the main targets was the U.S. Navy’s infrastructure on Guam, a strategic island in the Pacific that hosts several military installations, including B-52 bombers and submarines. Guam is a vital part of the U.S. military’s strategy in the region, as it provides access to resources and markets, protects sea lanes of communication, and supports humanitarian aid in times of crisis.

What’s being done to prevent or respond to the hack?

  • Microsoft was the first to report on the hack and identify Volt Typhoon as the perpetrator.
  • Microsoft contacted all groups affected by the hack and provided guidance on how to detect and mitigate this malicious activity
  • The cybersecurity agencies of the Five Eyes member nations (the United States, United Kingdom, Canada, Australia and New Zealand) issued a joint advisory on how to prevent or respond to similar intrusions.
  • One of the agencies involved in issuing the advisory was the Cybersecurity and Infrastructure Security Agency (CISA), which also published a statement highlighting China’s continued use of sophisticated means to target America’s critical infrastructure. CISA director Jen Easterly said in a statement:

“For years, China has conducted aggressive cyber operations to steal intellectual property and sensitive data from organizations around the globe. Today’s advisory highlights China’s continued use of sophisticated means to target our nation’s critical infrastructure, and it gives network defenders important insights into how to detect and mitigate this malicious activity.” – CISA director Jen Easterly

  • The advisory contains a hunting guide for the tactics, techniques, and procedures used by Volt Typhoon.
  • The Cybersecurity and Infrastructure Security Agency (CISA) also published a statement highlighting China’s continued use of sophisticated means to target America’s critical infrastructure. CISA urged network defenders to implement best practices such as patching vulnerabilities, enforcing strong passwords, monitoring network activity, and reporting incidents.

Key takeaways:

  • China is pursuing cyber warfare as a means of challenging America’s interests and influence in the Asia-Pacific region.
  • The hack exposed vulnerabilities in America’s communications systems and naval infrastructure, which could have serious consequences in a conflict scenario.
  • The United States needs to invest more in strengthening its cyber defenses and resilience, as well as enhancing its naval capabilities and readiness.

Conclusion:

The hack by Volt Typhoon is a wake-up call for America and its allies to take China’s cyber threats seriously.

A strong and capable U.S. Navy is essential for protecting America’s security and ensuring peace through strength. Americans for a Stronger Navy is a community-driven and membership-supported organization that advocates for policies and legislation that support the Navy’s ability to meet the challenges of a rapidly changing global security environment.

Join us today and help us promote a stronger navy for a safer world.

Sources:1: https://strongernavy.org/2: https://www.wionews.com/world/explained-everything-about-volt-typhoon-china-backed-hackers-targeting-critical-us-infrastructure-5962633: https://www.microsoft.com/en-us/security/blog/2023/05/24/volt-typhoon-targets-us-critical-infrastructure-with-living-off-the-land-techniques/4: https://www.cnbc.com/2023/05/24/microsoft-warns-that-china-hackers-attacked-us-infrastructure.html
: https://www.reuters.com/technology/what-is-volt-typhoon-alleged-china-backed-hacking-group-2023-05-25/

Posted on

Defending the Defenders: How the Navy and Allies are Responding to Chinese Cyber Threats

Introduction

In an era of rapidly evolving digital landscapes, cybersecurity is not only a private concern but a national defense priority. The American infrastructure recently faced an audacious cyber attack, with the U.S. Navy being one of the primary targets. How we respond to these invasions is critical to the future of our nation’s security and the strength of our Navy. It is imperative, now more than ever, for us to comprehend these challenges and stand united to support and protect our nation’s defenders.

Summary

This article delves into a recent cyber attack where Chinese-backed hackers targeted the U.S. Navy’s technology systems, seeking to disrupt critical communications. It focuses on the facts surrounding this breach, who is behind it, the affected areas, and the necessary steps being taken to prevent such incidents in the future.

Chinese Cyberattack: A Wake-up Call

Reports confirmed that hackers supported by China had successfully breached American infrastructure, including vital technology systems belonging to the U.S. Navy. The hackers’ aim was to disrupt crucial communication lines between the United States and Asia during potential crises. This was first reported by technology giant Microsoft, which attributed the hacking operation to a China-based group, Volt Typhoon.

Who is Pulling the Strings?

Microsoft identified the perpetrators as Volt Typhoon with “moderate confidence.” This group is a state-sponsored actor based in China that specializes in espionage and information gathering and has been active since at least 2021. The hackers employed legitimate credentials and small-office routers to infiltrate the systems, an approach known as “living off the land”. This audacious attack led to the breach of the U.S. Navy infrastructure on Guam, home to several crucial military installations.

The Scope of the Impact

The full extent of the breach is currently unclear, but the targets included several sectors such as communication, manufacturing, utility, transportation, construction, maritime, government, IT, and education. Secretary of the Navy Carlos Del Toro confirmed that the Navy was impacted by the hack, without disclosing further details. However, he expressed that China’s initiation of such a cyber attack was “no surprise”.

Key Takeaways

This attack is not an isolated incident, but rather part of a larger pattern of aggressive cyber operations by China, aiming to pilfer intellectual property and sensitive data. It is a wake-up call that highlights the persistent threat our nation’s critical infrastructure faces and provides insights into the sophisticated methods used by these malicious actors.

Taking Measures Against the Threat

In response to this attack, Microsoft has reached out to all groups affected. Additionally, cybersecurity agencies from the Five Eyes member nations have issued a joint advisory on the hack, outlining several preventive steps against such “living off the land” style intrusions.

Conclusion

As we sail through these uncharted waters of digital threats, it is crucial to stand united in support of the strength and security of our Navy. We must stay informed, vigilant, and proactive in understanding the nuances of these cyber threats, their implications, and the protective measures necessary to safeguard our nation’s assets. As a society, we can contribute to this mission by educating ourselves and raising awareness about the significance of cybersecurity in national defense, thus bolstering the resiliency of our Navy, and by extension, our nation.